logo

Database

Insecure digital certificates In nodejs

Description

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 22

10

Aliases

1. CVE-2019-156042. NVD-2019-156043. OSV-DEBIAN-2019-156044. OSV-2019-156045. OSV-ALPINE-2019-156046. GCVE-2019-156047. SECURITY-TRACKER-CVE-2019-156048. SECURITY-CVE-2019-156049. lists.opensuse.org10. access.redhat.com11. access.redhat.com12. access.redhat.com13. access.redhat.com14. access.redhat.com15. nodejs.org16. nodejs.org17. nodejs.org18. nodejs.org19. security.gentoo.org20. security.netapp.com21. DEBIAN-dsa-4669

References

1. https://www.oracle.com//security-alerts/cpujul2021.html2. https://www.oracle.com/security-alerts/cpuapr2020.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.