NetSight
IP …
high8.1

CVE-2020-8174

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Impact

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Affected products

VendorProductAffected versions
NodejsNode.Js
before 10.21.0
from 12.0.0 before 12.18.0
from 14.0.0 before 14.4.0
OracleBanking Extensibility Workbench
Versions 14.3.0, 14.4.0
OracleBlockchain Platform
before 21.1.2
OracleMysql Cluster
through 7.3.30
from 7.4.0 through 7.4.29
from 7.5.0 through 7.5.19
from 7.6.0 through 7.6.15
from 8.0.0 through 8.0.21
OracleRetail Xstore Point Of Service
Versions 16.0.6, 17.0.4, 18.0.3, 19.0.2, 20.0.1
NetappActive Iq Unified Manager
All versions
NetappOncommand Insight
All versions
NetappOncommand Workflow Automation
All versions
NetappSnapcenter
All versions

Weakness classification

CWE-119CWE-191

References