Download
| Alert*
oval:org.secpod.oval:def:106698
libuv is installed oval:org.secpod.oval:def:119125 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:118750 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:117706 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:106040 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:108125 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:108457 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:108490 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:108052 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:108053 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. oval:org.secpod.oval:def:506293 libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix: * libuv: out-of-bounds read in uv__idna_toascii can lead to information disclosures or crashes For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ... oval:org.secpod.oval:def:2500316 libuv is a multi-platform support library with a focus on asynchronous I/O. oval:org.secpod.oval:def:4501226 libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix: * libuv: out-of-bounds read in uv__idna_toascii can lead to information disclosures or crashes For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ... oval:org.secpod.oval:def:1505053 [1:1.41.1-1] - Rebase to 1.41.1 - Change description to reflect upstream - Resolves: RHBZ1980033 oval:org.secpod.oval:def:1702042 Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to informa ... oval:org.secpod.oval:def:1702171 libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` , truncates hostnames to 256 characters before calling `getaddrinfo`. This behavior can be exploited to create addresses like `0x00007f000001`, which are considered v ... oval:org.secpod.oval:def:114234 libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all platform differences in this library. |