ALPINE-CVE-2020-8252
ALPINE-CVE-2020-8252
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
libuv Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 1.38.1-r0
Update to 1.38.1-r0
libuv Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
libuv Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 1.39.0-r0
Update to 1.39.0-r0
nodejs Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 12.20.1-r0
Update to 12.20.1-r0
nodejs Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0
nodejs Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 12.18.4-r0
Update to 12.18.4-r0