rhsa-2019_1821
Vulnerability from csaf_redhat
Published
2019-07-22 13:39
Modified
2024-11-15 05:16
Summary
Red Hat Security Advisory: rh-nodejs8-nodejs security update
Notes
Topic
An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.0). (BZ#1665986, BZ#1710734)
Security Fix(es):
* nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link (CVE-2018-20834)
* nodejs: HTTP request splitting (CVE-2018-12116)
* nodejs: Denial of Service with large HTTP headers (CVE-2018-12121)
* nodejs: Slowloris HTTP Denial of Service (CVE-2018-12122)
* nodejs: Hostname spoofing in URL parser for javascript protocol (CVE-2018-12123)
* nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass (CVE-2019-5737)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.0). (BZ#1665986, BZ#1710734)\n\nSecurity Fix(es):\n\n* nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link (CVE-2018-20834)\n\n* nodejs: HTTP request splitting (CVE-2018-12116)\n\n* nodejs: Denial of Service with large HTTP headers (CVE-2018-12121)\n\n* nodejs: Slowloris HTTP Denial of Service (CVE-2018-12122)\n\n* nodejs: Hostname spoofing in URL parser for javascript protocol (CVE-2018-12123)\n\n* nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass (CVE-2019-5737)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1821",
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1660998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660998"
},
{
"category": "external",
"summary": "1661002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
},
{
"category": "external",
"summary": "1661005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
},
{
"category": "external",
"summary": "1661010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
},
{
"category": "external",
"summary": "1690808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
},
{
"category": "external",
"summary": "1702338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702338"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1821.json"
}
],
"title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update",
"tracking": {
"current_release_date": "2024-11-15T05:16:22+00:00",
"generator": {
"date": "2024-11-15T05:16:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1821",
"initial_release_date": "2019-07-22T13:39:40+00:00",
"revision_history": [
{
"date": "2019-07-22T13:39:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-07-22T13:39:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T05:16:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"product": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"product": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"product": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"product": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"product": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"product": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"product": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"product_id": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.16.0-1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.0-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"product": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"product_id": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.0.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.0-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"product": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"product_id": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.0-1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
"product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
"product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
"product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64"
},
"product_reference": "rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch"
},
"product_reference": "rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
},
"product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12116",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2018-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660998"
}
],
"notes": [
{
"category": "description",
"text": "Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: HTTP request splitting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12116"
},
{
"category": "external",
"summary": "RHBZ#1660998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660998"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12116",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12116"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12116",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12116"
}
],
"release_date": "2018-11-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: HTTP request splitting"
},
{
"cve": "CVE-2018-12121",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1661002"
}
],
"notes": [
{
"category": "description",
"text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Denial of Service with large HTTP headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12121"
},
{
"category": "external",
"summary": "RHBZ#1661002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12121",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121"
}
],
"release_date": "2018-11-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs: Denial of Service with large HTTP headers"
},
{
"cve": "CVE-2018-12122",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1661005"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Slowloris HTTP Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12122"
},
{
"category": "external",
"summary": "RHBZ#1661005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12122",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12122"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122"
}
],
"release_date": "2018-11-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
},
{
"category": "workaround",
"details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nodejs: Slowloris HTTP Denial of Service"
},
{
"cve": "CVE-2018-12123",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2018-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1661010"
}
],
"notes": [
{
"category": "description",
"text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Hostname spoofing in URL parser for javascript protocol",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12123"
},
{
"category": "external",
"summary": "RHBZ#1661010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12123",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12123"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123"
}
],
"release_date": "2018-11-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nodejs: Hostname spoofing in URL parser for javascript protocol"
},
{
"cve": "CVE-2018-20834",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2019-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1702338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nodejs-tar in versions prior to 4.4.2. An arbitrary file overwrite can occur when extracting tarballs containing a hard-link to a file that already exists in the system. Further, a file that matches the hard-link may overwrite the system\u0027s files with the contents of the extracted file. The highest threat from the vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In Red Hat OpenShift Logging the openshift-logging/kibana6-rhel8 container bundles many nodejs packages as a build time dependencies, including the tar package. \nThe vulnerable nodejs tar package is not used in a way that makes this vulnerability exploitable, hence the impact to OpenShift Logging by this vulnerability is Low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20834"
},
{
"category": "external",
"summary": "RHBZ#1702338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20834",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20834"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20834",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20834"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/344595",
"url": "https://hackerone.com/reports/344595"
}
],
"release_date": "2018-04-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link"
},
{
"cve": "CVE-2019-5737",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-03-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1690808"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5737"
},
{
"category": "external",
"summary": "RHBZ#1690808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
},
{
"category": "external",
"summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
"url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
}
],
"release_date": "2019-02-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-07-22T13:39:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1821"
},
{
"category": "workaround",
"details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
"product_ids": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.4.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.src",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.0-1.el7.x86_64",
"7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.0-1.el7.noarch",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.aarch64",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.ppc64le",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.s390x",
"7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.0.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.