CVE-2017-15897

CVE-2017-15897

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.

EPSS 2,3%

Publicación

2017-12-11T21:00:00.000Z

Actualización

2024-09-17T03:42:59.193Z

Pila tecnológica: node

Comprueba tu servidor →