远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2023: 5362 公告中提及的多个漏洞的影响。

  - 提供不受信任的用户数据作为范围时，7.5.2 之前的 semver 程序包容易遭受通过函数新范围执行的正则表达式拒绝服务 (ReDoS) 攻击。(CVE-2022-25883)

  - 使用“Module._load()”可绕过策略机制，并且需要给定模块的 policy.json 定义之外的模块。此漏洞会影响在所有以下可用的稳定版本系列中使用实验性策略机制的所有用户：16.x、18.x 和 20.x。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32002)

  - 使用“module.constructor.createRequire()”可绕过策略机制，并且需要给定模块的 policy.json 定义之外的模块。此漏洞会影响在所有以下可用的稳定版本系列中使用实验性策略机制的所有用户：16.x、18.x 和 20.x。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32006)

  - 所有活跃发布线的实验性策略机制中都存在权限提升漏洞：16.x、18.x 和 20.x。使用已弃用的 API“process.binding()”可通过要求内部模块绕过策略机制，并最终利用“process.binding('spawn_sync')”运行“policy.json”文件中定义的限制之外的任意代码。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32559)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Oracle Linux 9 主机上安装的程序包受到 ELSA-2023-5363 公告中提及的多个漏洞的影响。

  - 使用“module.constructor.createRequire()”可绕过策略机制，并且需要给定模块的 policy.json 定义之外的模块。此漏洞会影响在所有以下可用的稳定版本系列中使用实验性策略机制的所有用户：16.x、18.x 和 20.x。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32006)

  - 使用“Module._load()”可绕过策略机制，并且需要给定模块的 policy.json 定义之外的模块。此漏洞会影响在所有以下可用的稳定版本系列中使用实验性策略机制的所有用户：16.x、18.x 和 20.x。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32002)

  - 提供不受信任的用户数据作为范围时，7.5.2 之前的 semver 程序包容易遭受通过函数新范围执行的正则表达式拒绝服务 (ReDoS) 攻击。(CVE-2022-25883)

  - 所有活跃发布线的实验性策略机制中都存在权限提升漏洞：16.x、18.x 和 20.x。使用已弃用的 API“process.binding()”可通过要求内部模块绕过策略机制，并最终利用“process.binding('spawn_sync')”运行“policy.json”文件中定义的限制之外的任意代码。请注意，发布此 CVE 时，该策略是 Node.js 的一项实验性功能。(CVE-2023-32559)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - nodejs-semver: Regular expression denial of service (CVE-2022-25883)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5361 advisory.

  - nodejs-semver: Regular expression denial of service (CVE-2022-25883)

  - nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)

  - nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)

  - nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)

  - nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

  - nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)

  - nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire()     (CVE-2023-32006)

  - nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5362 advisory.

  - nodejs-semver: Regular expression denial of service (CVE-2022-25883)

  - nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)

  - nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire()     (CVE-2023-32006)

  - nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5362 advisory.

  - Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS)     via the function new Range, when untrusted user data is provided as a range. (CVE-2022-25883)

  - The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json     definition for a given module. This vulnerability affects all users using the experimental policy     mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was     issued, the policy is an experimental feature of Node.js. (CVE-2023-32002)

  - The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules     outside of the policy.json definition for a given module. This vulnerability affects all users using the     experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the     time this CVE was issued, the policy is an experimental feature of Node.js. (CVE-2023-32006)

  - A privilege escalation vulnerability exists in the experimental policy mechanism in all active release     lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy     mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')`     run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time     this CVE was issued, the policy is an experimental feature of Node.js. (CVE-2023-32559)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5363 advisory.

  - The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules     outside of the policy.json definition for a given module. This vulnerability affects all users using the     experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the     time this CVE was issued, the policy is an experimental feature of Node.js. (CVE-2023-32006)

  - The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json     definition for a given module. This vulnerability affects all users using the experimental policy     mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was     issued, the policy is an experimental feature of Node.js. (CVE-2023-32002)

  - Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS)     via the function new Range, when untrusted user data is provided as a range. (CVE-2022-25883)

  - A privilege escalation vulnerability exists in the experimental policy mechanism in all active release     lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy     mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')`     run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time     this CVE was issued, the policy is an experimental feature of Node.js. (CVE-2023-32559)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
181893	RHEL 8：nodejs: 18 (RHSA-2023: 5362)	Nessus	Red Hat Local Security Checks	2023/9/26	2024/4/28	critical
182518	Oracle Linux 9：nodejs: 18 (ELSA-2023-5363)	Nessus	Oracle Linux Local Security Checks	2023/10/4	2023/10/13	critical
198762	RHEL 6 : nodejs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
181892	RHEL 8 : nodejs:16 (RHSA-2023:5361)	Nessus	Red Hat Local Security Checks	2023/9/26	2024/4/28	critical
181893	RHEL 8 : nodejs:18 (RHSA-2023:5362)	Nessus	Red Hat Local Security Checks	2023/9/26	2024/4/28	critical
181897	AlmaLinux 8 : nodejs:18 (ALSA-2023:5362)	Nessus	Alma Linux Local Security Checks	2023/9/26	2023/9/27	critical
182518	Oracle Linux 9 : nodejs:18 (ELSA-2023-5363)	Nessus	Oracle Linux Local Security Checks	2023/10/4	2023/10/13	critical

偵測

搜尋 Plugin

critical

critical

high

critical

critical

critical

critical