Bug 1912854 (CVE-2020-8265)
| Summary: | CVE-2020-8265 nodejs: use-after-free in the TLS implementation | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Guilherme de Almeida Suckevicz <gsuckevi> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | bdettelb, cmoore, gmccullo, hhorak, jorton, jstanek, kaycoth, kmullins, kwalsh, mrunge, mvanderw, nodejs-maint, nodejs-sig, sadams, scorneli, sgallagh, tchollingsworth, thrcka, tomckay, zsvetlik |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | node 10.23.1, node 12.20.1, node 14.15.4, node 15.5.1 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in nodejs. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-02-04 20:42:22 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1913262, 1912857, 1912858, 1912859, 1912860, 1912999, 1913000, 1913001, 1913002, 1913003, 1913004, 1913005, 1913250, 1913251, 1913252, 1913253, 1914776, 1914798, 1914934, 1916460, 1916461, 1916463 | ||
| Bug Blocks: | 1912868 | ||
|
Description
Guilherme de Almeida Suckevicz
2021-01-05 13:06:19 UTC
Created nodejs tracking bugs for this issue: Affects: fedora-all [bug 1912857] Created nodejs:10/nodejs tracking bugs for this issue: Affects: fedora-all [bug 1912858] Created nodejs:12/nodejs tracking bugs for this issue: Affects: fedora-all [bug 1912859] Created nodejs:14/nodejs tracking bugs for this issue: Affects: fedora-all [bug 1912860] Red Hat Quay does not use the NodeJS TLS implementation. External References: https://hackerone.com/reports/988103 (In reply to Cedric Buissart from comment #2) > Upstream fix: > https://github.com/nodejs/node/commit/7f178663ebffc82c9f8a5a1b6bf2da0c263a30ed Note that this is the fix for v10 branch; for v14 and v12, it looks a bit differently: https://github.com/nodejs/node/commit/4f8772f9b731118628256189b73cd202149bbd97 This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS Via RHSA-2021:0421 https://access.redhat.com/errata/RHSA-2021:0421 This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-8265 This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS Via RHSA-2021:0485 https://access.redhat.com/errata/RHSA-2021:0485 This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS Via RHSA-2021:0521 https://access.redhat.com/errata/RHSA-2021:0521 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2021:0548 https://access.redhat.com/errata/RHSA-2021:0548 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2021:0549 https://access.redhat.com/errata/RHSA-2021:0549 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2021:0551 https://access.redhat.com/errata/RHSA-2021:0551 |