CVE-2017-14919
Fixed in a distro release EPSS 8%
Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
Products: Siemens CADRA
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | nodejs | 6.11.5-r0 |
| Alpine 3.11 | nodejs | 6.11.5-r0 |
| Alpine 3.12 | nodejs | 6.11.5-r0 |
| Alpine 3.13 | nodejs | 6.11.5-r0 |
| Alpine 3.14 | nodejs | 6.11.5-r0 |
| Alpine 3.15 | nodejs | 6.11.5-r0 |
| Alpine 3.16 | nodejs | 6.11.5-r0 |
| Alpine 3.17 | nodejs | 6.11.5-r0 |
| Alpine 3.18 | nodejs | 6.11.5-r0 |
| Alpine 3.19 | nodejs | 6.11.5-r0 |
| Alpine 3.20 | nodejs | 6.11.5-r0 |
| Alpine 3.21 | nodejs | 6.11.5-r0 |
| Alpine 3.22 | nodejs | 6.11.5-r0 |
| Alpine 3.23 | nodejs | 6.11.5-r0 |
| Alpine 3.24 | nodejs | 6.11.5-r0 |
| Alpine 3.7 | nodejs | 6.11.5-r0 |
| Alpine 3.8 | nodejs | 6.11.5-r0 |
| Alpine 3.9 | nodejs | 6.11.5-r0 |
| SUSE Enterprise Storage 4 | nodejs4 | 4.8.7-15.8.1 |
| SUSE Enterprise Storage 4 | nodejs6 | 6.12.2-11.8.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | nodejs4 | 4.8.7-15.8.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | nodejs6 | 6.12.2-11.8.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox | 68.2.0-78.51.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox-branding-SLED | 68-21.9.8 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-atk | 2.26.1-2.8.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-cairo | 1.15.10-2.13.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-gdk-pixbuf | 2.36.11-2.8.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-glib2 | 2.54.3-2.14.7 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-gtk3 | 3.10.9-2.15.3 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-harfbuzz | 1.7.5-2.7.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-libffi | 3.2.1.git259-2.3.3 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-pango | 1.40.14-2.7.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | mozilla-nspr | 4.21-29.6.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | mozilla-nss | 3.45-38.9.3 |
| SUSE OpenStack Cloud 7 | nodejs6 | 6.12.2-11.8.1 |