CVE-2023-23919
Fixed in a distro release EPSS 2%CVSS 7.5
A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.
Products: NodeJS Node
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux:8 | nodejs | 1:16.19.1-1.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:8 | nodejs-devel | 1:16.19.1-1.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:8 | nodejs-docs | 1:16.19.1-1.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:8 | nodejs-full-i18n | 1:16.19.1-1.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:8 | nodejs-nodemon | 2.0.20-3.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:8 | nodejs-packaging | 25-1.module_el8.5.0+2605+45d748af |
| AlmaLinux:8 | npm | 1:8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324 |
| AlmaLinux:9 | nodejs | 1:18.14.2-2.module_el9.2.0+29+de583a0b |
| AlmaLinux:9 | nodejs-devel | 1:18.14.2-2.module_el9.2.0+29+de583a0b |
| AlmaLinux:9 | nodejs-docs | 1:18.14.2-2.module_el9.2.0+29+de583a0b |
| AlmaLinux:9 | nodejs-full-i18n | 1:18.14.2-2.module_el9.2.0+29+de583a0b |
| AlmaLinux:9 | nodejs-nodemon | 2.0.20-2.module_el9.2.0+29+de583a0b |
| AlmaLinux:9 | nodejs-packaging | 2021.06-4.module_el9.1.0+13+d9a595ea |
| AlmaLinux:9 | nodejs-packaging-bundler | 2021.06-4.module_el9.1.0+13+d9a595ea |
| AlmaLinux:9 | npm | 1:9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b |
| Alpine:v3.15 | nodejs | 16.19.1-r0 |
| Alpine:v3.16 | nodejs | 16.19.1-r0 |
| Alpine:v3.17 | nodejs | 18.14.1-r0 |
| Alpine:v3.18 | nodejs | 18.14.1-r0 |
| Alpine:v3.19 | nodejs | 18.14.1-r0 |
| Alpine:v3.20 | nodejs | 18.14.1-r0 |
| Alpine:v3.21 | nodejs | 18.14.1-r0 |
| Alpine:v3.22 | nodejs | 18.14.1-r0 |
| Alpine:v3.23 | nodejs | 18.14.1-r0 |
| Alpine:v3.24 | nodejs | 18.14.1-r0 |
| Debian:12 | nodejs | 18.19.0+dfsg-6~deb12u1 |
| Debian:13 | nodejs | 18.13.0+dfsg1-1.1 |
| Debian:14 | nodejs | 18.13.0+dfsg1-1.1 |
| Red Hat:enterprise_linux:8 | nodejs | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-debuginfo | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-debuginfo | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-debugsource | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-debugsource | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-devel | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-devel | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-docs | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-docs | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-full-i18n | 1:18.14.2-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-full-i18n | 1:16.19.1-1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-nodemon | 0:2.0.20-3.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | nodejs-nodemon | 0:2.0.20-2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:8 | nodejs-packaging | 0:25-1.module+el8.5.0+10992+fac5fe06 |
| Red Hat:enterprise_linux:8 | nodejs-packaging | 0:2021.06-4.module+el8.7.0+15582+19c314fa |
| Red Hat:enterprise_linux:8 | nodejs-packaging-bundler | 0:2021.06-4.module+el8.7.0+15582+19c314fa |
| Red Hat:enterprise_linux:8 | npm | 1:8.19.3-1.16.19.1.1.module+el8.7.0+18373+704f5cef |
| Red Hat:enterprise_linux:8 | npm | 1:9.5.0-1.18.14.2.2.module+el8.7.0+18445+9493b6ea |
| Red Hat:enterprise_linux:9 | nodejs | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-debuginfo | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-debugsource | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-devel | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-docs | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-full-i18n | 1:18.14.2-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-nodemon | 0:2.0.20-2.module+el9.2.0.z+18497+a402347c |
| Red Hat:enterprise_linux:9 | nodejs-packaging | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:enterprise_linux:9 | nodejs-packaging-bundler | 0:2021.06-4.module+el9.1.0+15718+e52ec601 |
| Red Hat:enterprise_linux:9 | npm | 1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c |
| Rocky Linux:8 | nodejs | 1:16.19.1-1.module+el8.7.0+1178+d52dba78 |
| Rocky Linux:8 | nodejs-nodemon | 0:2.0.20-3.module+el8.7.0+1178+d52dba78 |
| Rocky Linux:8 | nodejs-packaging | 0:25-1.module+el8.6.0+1046+80feca58 |
| Rocky Linux:9 | nodejs-packaging | 0:2021.06-4.module+el9.7.0+40018+a011993d |
| Rocky Linux:9 | nodejs-packaging | 0:2021.06-4.module+el9.7.0+40022+9ecc286c |
| Rocky Linux:9 | nodejs-packaging | 0:2021.06-4.module+el9.7.0+40025+0e0cf6b2 |
| Rocky Linux:9 | nodejs-packaging | 0:2021.06-4.module+el9.7.0+40017+f0db1785 |
| SUSE:Enterprise Storage 7.1 | nodejs16 | 16.19.1-150300.7.18.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | nodejs16 | 16.19.1-150300.7.18.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | nodejs16 | 16.19.1-150300.7.18.1 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | nodejs16 | 16.19.1-8.24.1 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | nodejs18 | 18.14.2-8.6.2 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 | nodejs16 | 16.19.1-150400.3.15.1 |
| SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 | nodejs18 | 18.14.2-150400.9.6.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | nodejs16 | 16.19.1-150300.7.18.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | nodejs16 | 16.19.1-150300.7.18.1 |
| SUSE:Manager Server 4.2 | nodejs16 | 16.19.1-150300.7.18.1 |
| Ubuntu:20.04:LTS | nodejs | 10.19.0~dfsg-3ubuntu1.5 |
| Ubuntu:22.04:LTS | nodejs | 12.22.9~dfsg-1ubuntu3.4 |
| Ubuntu:24.04:LTS | nodejs | 18.19.1+dfsg-2ubuntu4 |
| openSUSE:Leap 15.4 | nodejs16 | 16.19.1-150400.3.15.1 |
| openSUSE:Leap 15.4 | nodejs18 | 18.14.2-150400.9.6.2 |
| openSUSE:Tumbleweed | nodejs18 | 18.14.2-1.1 |
| openSUSE:Tumbleweed | nodejs19 | 19.7.0-1.1 |