LowFix available
Node.js 4.3.2 (LTS)
Node.js 4.3.2 upgrades OpenSSL to 1.0.2g, fixing defects associated with denial of service or memory corruption, and the CacheBleed side-channel attack.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
openssl: Upgrade from 1.0.2f to 1.0.2g
Node.js
Node.js 4.3.2 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 4.3.2
Node.js 4.3.2 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2016-0705
More info is available at CVE-2016-0705.
CVE-2016-0797More info is available at CVE-2016-0797.
CVE-2016-0702More info is available at CVE-2016-0702.
Publisher severity
low
It is likely to be very difficult to use this defect for a practical attack and is therefore considered low severity for Node.js users.
- Event
- #67770 · Revision 1
- Added to Heist Feed
- Publisher date