Test Kennung:	1.3.6.1.4.1.25623.1.1.1.1.2023.5373
Kategorie:	Debian Local Security Checks
Titel:	Debian: Security Advisory (DSA-5373-1)
Zusammenfassung:	The remote host is missing an update for the Debian 'node-sqlite3' package(s) announced via the DSA-5373-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Debian 'node-sqlite3' package(s) announced via the DSA-5373-1 advisory. Vulnerability Insight: Dave McDaniel discovered that the SQLite3 bindings for Node.js were susceptible to the execution of arbitrary JavaScript code if a binding parameter is a crafted object. For the stable distribution (bullseye), this problem has been fixed in version 5.0.0+ds1-1+deb11u2. We recommend that you upgrade your node-sqlite3 packages. For the detailed security status of node-sqlite3 please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'node-sqlite3' package(s) on Debian 11. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-43441 https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.