Threats Tagged 'cve-2024-27982'

Multiple security vulnerabilities have been identified and addressed in the Node.js 20 module for Red Hat Enterprise Linux 8. These include denial of service issues via the fetch() function and CONTINUATION frames, an out-of-bounds read in the c-ares library, HTTP request smuggling via content length obfuscation, and other related flaws. Red Hat has released an important security update to fix these issues. The vulnerabilities affect Node.js as packaged for Red Hat Enterprise Linux 8 and its extended life cycle variants across multiple architectures.

Multiple security vulnerabilities affecting Node.js 18 and related components in Red Hat Enterprise Linux 9 have been addressed in an important security update. The issues include denial of service (DoS) vulnerabilities via CONTINUATION frames and the fetch() function, HTTP request smuggling via content length obfuscation, and an out-of-bounds read in the c-ares library. These vulnerabilities could lead to service disruption or crashes. Red Hat has released updates to fix these issues for various Red Hat Enterprise Linux 9 variants and architectures.

Red Hat has issued a security advisory for the nodejs:18 module addressing multiple vulnerabilities including denial of service (DoS) issues via CONTINUATION frames and the fetch() function, HTTP request smuggling through content length obfuscation, and an out-of-bounds read in the c-ares library. These vulnerabilities affect Red Hat Enterprise Linux 8 variants and related architectures. The advisory rates the security impact as Important and provides updated packages to remediate these issues.

Red Hat has issued a security advisory for Node.js addressing two vulnerabilities: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) and a Denial of Service (DoS) vulnerability via CONTINUATION frames (CVE-2024-27983). These issues affect Node.js as packaged for Red Hat Enterprise Linux 9. The advisory rates the impact as Important and provides updated packages to remediate these vulnerabilities.