https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:53:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01435 bdu:2026-01435 https://cve.radiocsirt.org/vuln/bdu:2026-01435 https://cve.radiocsirt.org/vuln/bell-cve-2018-7167 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-7167 https://cve.radiocsirt.org/vuln/cleanstart-2026-wi10570 <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-wi10570 https://cve.radiocsirt.org/vuln/cnvd-2018-11911 cnvd-2018-11911 https://cve.radiocsirt.org/vuln/cnvd-2018-11911 https://cve.radiocsirt.org/vuln/euvd-2026-181058 EUVD-2026-181058 https://cve.radiocsirt.org/vuln/euvd-2026-181058 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7167 <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7167 https://cve.radiocsirt.org/vuln/ghsa-jr5v-587f-389p <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-jr5v-587f-389p https://cve.radiocsirt.org/vuln/gsd-2018-7167 gsd-2018-7167 https://cve.radiocsirt.org/vuln/gsd-2018-7167 https://cve.radiocsirt.org/vuln/msrc_cve-2018-7167 msrc_CVE-2018-7167 https://cve.radiocsirt.org/vuln/msrc_cve-2018-7167 https://cve.radiocsirt.org/vuln/rhsa-2018:2949 <p>nodejs: HTTP parser allowed for spaces inside Content-Length header values nodejs: Inspector DNS rebinding vulnerability nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters nodejs: Out of bounds (OOB) write via UCS-2 encoding</p> <p>nodejs: HTTP parser allowed for spaces inside Content-Length header values nodejs: Inspector DNS rebinding vulnerability nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters nodejs: Out of bounds (OOB) write via UCS-2 encoding</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2949 https://cve.radiocsirt.org/vuln/suse-su-2018:1892-1 <p>Security update for nodejs6</p> <p>Security update for nodejs6</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1892-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7167 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs</p> <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs</p> <p>Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS &#34;Boron&#34;), 8.x (LTS &#34;Carbon&#34;), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7167