NetSight
IP …
high7.5

CVE-2019-15604

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

Impact

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

Affected products

VendorProductAffected versions
NodejsNode.Js
from 10.0.0 before 10.19.0
from 12.0.0 before 12.15.0
from 13.0.0 before 13.8.0
DebianDebian Linux
Version 10.0
OpensuseLeap
Version 15.1
RedhatSoftware Collections
Version 1.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6
OracleCommunications Cloud Native Core Network Function Cloud Native Environment
Version 1.4.0
OracleGraalvm
Versions 19.3.1, 20.0.0

Weakness classification

CWE-295

References