CVE-2020-8172
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Original description
The description as published by the source.
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Affected packages
Bitnami
node-min
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.18.0"},{"introduced":"14.0.0"},{"fixed":"14.4.0"}]}]
Bitnami
node
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.18.0"},{"introduced":"14.0.0"},{"fixed":"14.4.0"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2020-8172 nodejs Fixed in: 12.20.1-r0
References
- advisory nodejs.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory oracle.com
- patch oracle.com
- patch oracle.com
- patch oracle.com
- patch oracle.com
- report hackerone.com
- web nvd.nist.gov