Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Mageia 8: MGASA-2021-0394 Moderate: Node.js Memory Exploitation Risk

mageia
Calendar Grey August 6, 2021
Dist Mageia Esm H88
Mageia 2021-0395 addresses security flaws in nodejs, implementing urgent patches to mitigate risks of possible breaches.
Updated nodejs packages fix security vulnerability: Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change pr...

Summary

Updated nodejs packages fix security vulnerability:
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior (CVE-2021-22930)

References

- https://bugs.mageia.org/show_bug.cgi?id=29301

- https://nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/

- https://www.cve.org/CVERecord?id=CVE-2021-22930

Topics%20covered

Topics Covered

security advisory memory corruption node.js use after free mageia process behavior

Resolution

SRPMS

- 8/core/nodejs-14.17.4-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Aug 2021
URL: https://advisories.mageia.org/MGASA-2021-0394.html
Type: security
CVE: CVE-2021-22930

Topics%20covered

Topics Covered

security advisory memory corruption node.js use after free mageia process behavior

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.