Threats Tagged 'cve-2025-23166'

A security update for Node.js 22 on Red Hat Enterprise Linux addresses a remote crash vulnerability via the SignTraits::DeriveBits() function (CVE-2025-23166). This issue could cause a denial of service by crashing the Node.js process remotely. The update is rated as Important by Red Hat Product Security. The advisory covers multiple Red Hat Enterprise Linux 8 variants and architectures. No CVSS score is provided, and no known exploits are reported in the wild. The update is available through Red Hat's official channels.

A security update for Node.js 20 on Red Hat Enterprise Linux addresses multiple vulnerabilities, including a remote crash issue via SignTraits::DeriveBits() (CVE-2025-23166). The update is rated as important by Red Hat Product Security. The advisory covers Red Hat Enterprise Linux 9 and its extended update support versions across multiple architectures. No CVSS score is provided in the advisory. The vulnerabilities relate to issues such as resource management and potential crashes.

A security update for Node.js (nodejs22) on Red Hat Enterprise Linux 10 addresses a vulnerability identified as CVE-2025-23166, which involves a remote crash via the SignTraits::DeriveBits() function. The update is rated as important by Red Hat Product Security and affects multiple architectures of Red Hat Enterprise Linux 10. The advisory references two CVEs: CVE-2025-23165 and CVE-2025-23166. No CVSS score is provided in the advisory. The update is available and should be applied to affected systems to remediate the issue.

A security update for Node.js 20 on Red Hat Enterprise Linux addresses a remote crash vulnerability via the SignTraits::DeriveBits() function (CVE-2025-23166). This advisory covers multiple related CVEs (CVE-2025-23165, CVE-2025-23166, CVE-2025-23167) rated as important by Red Hat. The vulnerabilities can cause remote crashes but no known exploits are reported in the wild. Red Hat has released updated packages for various architectures and versions of RHEL 8 to fix these issues.

A security vulnerability identified as CVE-2025-23166 affects Node.js, specifically causing a remote crash via the SignTraits::DeriveBits() function. This issue has been addressed in a security update for the nodejs:20 module on Red Hat Enterprise Linux 9.4 Extended Update Support. The vulnerability is rated as having an important security impact by Red Hat Product Security. The advisory provides updated packages to remediate the issue.