ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2023.0226
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2023-0226)
Resumen:	The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2023-0226 advisory.
Descripción:	Summary: The remote host is missing an update for the 'nodejs' package(s) announced via the MGASA-2023-0226 advisory. Vulnerability Insight: Current nodejs 14 branch in Mageia 8 is end of life and there are no more security updates. This release allows to move to the new nodejs 18 LTS branch and fixes the following CVEs CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High) CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium) CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium) CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium) OpenSSL Security Releases OpenSSL security advisory 28th March. OpenSSL security advisory 20th April. OpenSSL security advisory 30th May c-ares vulnerabilities: GHSA-9g78-jv2r-p7vc GHSA-8r8p-23f3-64c2 GHSA-54xr-f67r-4pc4 GHSA-x6mf-cxr9-8q6v Affected Software/OS: 'nodejs' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-30581 https://nodejs.org/en/blog/vulnerability/june-2023-security-releases Common Vulnerability Exposure (CVE) ID: CVE-2023-30582 Common Vulnerability Exposure (CVE) ID: CVE-2023-30583 Common Vulnerability Exposure (CVE) ID: CVE-2023-30584 Common Vulnerability Exposure (CVE) ID: CVE-2023-30585 Common Vulnerability Exposure (CVE) ID: CVE-2023-30586 https://hackerone.com/reports/1954535 Common Vulnerability Exposure (CVE) ID: CVE-2023-30587 Common Vulnerability Exposure (CVE) ID: CVE-2023-30588 Common Vulnerability Exposure (CVE) ID: CVE-2023-30589 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IV326O2X4BE3SINX5FJHMAKVHUAA4ZYF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCVG4TQRGTK4LKAZKVEQAUEJM7DUACYE/ https://hackerone.com/reports/2001873 Common Vulnerability Exposure (CVE) ID: CVE-2023-30590 https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.