UnratedFix available
Node.js 18.12.1 (LTS)
Node.js 18.12.1 fixes three reported vulnerabilities, including X.509 buffer overflows and DNS rebinding through --inspect.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The following CVEs are fixed in this release: CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High) CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High) CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
Node.js
Node.js 18.12.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 18.12.1
Node.js 18.12.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2022-3602
CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow (High)
CVE-2022-3786CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow (High)
CVE-2022-43548CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
Publisher severity
No explicit severity was extracted.
- Event
- #29781 · Revision 1
- Added to Heist Feed
- Publisher date