Most recent entries from all

bdu:2026-01428

Withdrawn: BELL-CVE-2018-12115 — CVE-2018-12115 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-HX85573 — Security fixes in nodejs 8.11.4-r0

Withdrawn by the publisher.

Affected: CleanStart: nodejs

Package nodejs version 8.11.4-r0 fixes 1 vulnerabilities: CVE-2018-12115

cnvd-2019-42559

EUVD-2026-164735

fkie_cve-2018-12115

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.

GHSA-q85m-543x-pwpc

gsd-2018-12115

RHSA-2018:2552 — Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update

openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang nodejs: Out of bounds (OOB) write via UCS-2 encoding

SUSE-SU-2018:2647-1 — Security update for nodejs4

Security update for nodejs4

UBUNTU-CVE-2018-12115

Affected: Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs