CVE-2020-8172
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Paquets affectés
Bitnami
node-min
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.18.0"},{"introduced":"14.0.0"},{"fixed":"14.4.0"}]}]
Bitnami
node
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"12.18.0"},{"introduced":"14.0.0"},{"fixed":"14.4.0"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2020-8172 nodejs Corrigé dans: 12.20.1-r0
Références
- advisory hackerone.com
- advisory nodejs.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory oracle.com
- advisory oracle.com
- advisory oracle.com
- advisory oracle.com
- advisory oracle.com
- web nvd.nist.gov