Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-8174

Fixed in a distro release EPSS 8%

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Published 2020-07-24 · CVE record · OSV

Products: nodejs node.js, oracle banking_extensibility_workbench, oracle blockchain_platform, Oracle MySQL Cluster, oracle retail_xstore_point_of_service, netapp active_iq_unified_manager, netapp oncommand_insight, netapp oncommand_workflow_automation, netapp snapcenter

Distro releases

ReleasePackageFixed in
AlmaLinux 8nodejs-nodemon1.18.3-1.module_el8.3.0+2023+d2377ea3
AlmaLinux 8nodejs-nodemon1.18.3-1.module_el8.3.0+2047+b07ac28e
AlmaLinux 8nodejs-packaging17-3.module_el8.4.0+2224+b07ac28e
AlmaLinux 8nodejs-packaging17-3.module_el8.4.0+2521+c668cc9f
AlmaLinux 8nodejs-packaging17-3.module_el8.3.0+2023+d2377ea3
Alpine 3.11nodejs12.20.1-r0
Alpine 3.12nodejs12.18.3-r0
Alpine 3.13nodejs12.18.0-r0
Alpine 3.14nodejs12.18.0-r0
Alpine 3.15nodejs12.18.0-r0
Alpine 3.16nodejs12.18.0-r0
Alpine 3.17nodejs12.18.0-r0
Alpine 3.18nodejs12.18.0-r0
Alpine 3.19nodejs12.18.0-r0
Alpine 3.20nodejs12.18.0-r0
Alpine 3.21nodejs12.18.0-r0
Alpine 3.22nodejs12.18.0-r0
Alpine 3.23nodejs12.18.0-r0
Alpine 3.24nodejs12.18.0-r0
Debian 10nodejs10.21.0~dfsg-1~deb10u1
Debian 12nodejs10.21.0~dfsg-1
Debian 13nodejs10.21.0~dfsg-1
Debian 14nodejs10.21.0~dfsg-1
Red Hat Enterprise Linux 8nodejs1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-debuginfo1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs-debuginfo1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-debugsource1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs-debugsource1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-devel1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs-devel1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-docs1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-docs1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs-full-i18n1:10.21.0-3.module+el8.2.0+7071+d2377ea3
Red Hat Enterprise Linux 8nodejs-full-i18n1:12.18.2-1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8nodejs-nodemon0:1.18.3-1.module+el8.1.0+3369+37ae6a45
Red Hat Enterprise Linux 8nodejs-nodemon0:1.18.3-1.module+el8+2632+6c5111ed
Red Hat Enterprise Linux 8nodejs-packaging0:17-3.module+el8+2873+aa7dfd9a
Red Hat Enterprise Linux 8nodejs-packaging0:17-3.module+el8.1.0+3369+37ae6a45
Red Hat Enterprise Linux 8npm1:6.14.5-1.12.18.2.1.module+el8.2.0+7233+61d664c1
Red Hat Enterprise Linux 8npm1:6.14.4-1.10.21.0.3.module+el8.2.0+7071+d2377ea3
Red Hat rhel e4s 8.0nodejs1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-debuginfo1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-debugsource1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-devel1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-docs1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-full-i18n1:10.21.0-3.module+el8.0.0+7067+054302d1
Red Hat rhel e4s 8.0nodejs-nodemon0:1.18.3-1.module+el8+2632+6c5111ed
Red Hat rhel e4s 8.0nodejs-packaging0:17-3.module+el8+2873+aa7dfd9a
Red Hat rhel e4s 8.0npm1:6.14.4-1.10.21.0.3.module+el8.0.0+7067+054302d1
Red Hat rhel eus 8.1nodejs1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-debuginfo1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-debuginfo1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs-debugsource1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs-debugsource1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-devel1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-devel1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs-docs1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-docs1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs-full-i18n1:12.18.2-1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel eus 8.1nodejs-full-i18n1:10.21.0-3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1nodejs-nodemon0:1.18.3-1.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.1nodejs-nodemon0:1.18.3-1.module+el8+2632+6c5111ed
Red Hat rhel eus 8.1nodejs-packaging0:17-3.module+el8+2873+aa7dfd9a
Red Hat rhel eus 8.1nodejs-packaging0:17-3.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.1npm1:6.14.4-1.10.21.0.3.module+el8.1.0+7070+fe09e702
Red Hat rhel eus 8.1npm1:6.14.5-1.12.18.2.1.module+el8.1.0+7232+f8b5ede5
Red Hat rhel software collections 3rh-nodejs10-nodejs0:10.21.0-3.el7
Red Hat rhel software collections 3rh-nodejs10-nodejs-debuginfo0:10.21.0-3.el7
Red Hat rhel software collections 3rh-nodejs10-nodejs-devel0:10.21.0-3.el7
Red Hat rhel software collections 3rh-nodejs10-nodejs-docs0:10.21.0-3.el7
Red Hat rhel software collections 3rh-nodejs10-npm0:6.14.4-10.21.0.3.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs0:12.18.2-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-debuginfo0:12.18.2-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-devel0:12.18.2-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-docs0:12.18.2-1.el7
Red Hat rhel software collections 3rh-nodejs12-npm0:6.14.5-12.18.2.1.el7
Rocky Linux 8nodejs-nodemon0:1.18.3-1.module+el8.3.0+101+f84c7154
Rocky Linux 8nodejs-packaging0:17-3.module+el8.3.0+101+f84c7154
SUSE Linux Enterprise High Performance Computing 15-ESPOSnodejs1010.21.0-1.21.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSnodejs88.17.0-3.32.1
SUSE Linux Enterprise High Performance Computing 15-LTSSnodejs1010.21.0-1.21.1
SUSE Linux Enterprise High Performance Computing 15-LTSSnodejs88.17.0-3.32.1
SUSE Linux Enterprise Module for Web and Scripting 12nodejs1010.21.0-1.24.1
SUSE Linux Enterprise Module for Web and Scripting 12nodejs1212.18.0-1.14.1
SUSE Linux Enterprise Module for Web and Scripting 12nodejs66.17.1-11.37.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP1nodejs1010.21.0-1.21.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP1nodejs88.17.0-3.32.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP2nodejs1010.21.0-1.21.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP2nodejs88.17.0-10.3.1
SUSE Linux Enterprise Server 15-LTSSnodejs1010.21.0-1.21.1
SUSE Linux Enterprise Server 15-LTSSnodejs88.17.0-3.32.1
SUSE Linux Enterprise Server for SAP Applications 15nodejs1010.21.0-1.21.1
SUSE Linux Enterprise Server for SAP Applications 15nodejs88.17.0-3.32.1
SUSE OpenStack Cloud 7nodejs66.17.1-11.37.1
SUSE OpenStack Cloud Crowbar 8nodejs66.17.1-11.37.1
SUSE OpenStack Cloud Crowbar 9nodejs66.17.1-11.37.1
Ubuntu 20.04 LTSnodejs10.19.0~dfsg-3ubuntu1.1
Ubuntu Pro 16.04 LTSnodejs4.2.6~dfsg-1ubuntu4.2+esm2
Ubuntu Pro 18.04 LTSnodejs8.10.0~dfsg-2ubuntu0.4+esm2
openSUSE Leap 15.1nodejs88.17.0-lp151.2.15.1
openSUSE Tumbleweednodejs1414.17.5-1.2