DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Software Collections: Mehrere Schwachstellen
view advisory published 2020-06-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Software Collections ausnutzen, um die Vertraulichkeit, Verfügbarkeit und die Integrität der Anwendungen zu gefährden.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-18869US | low2.5 | — | ||
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks. | ||||
| CVE-2019-16777US | medium6.5 | — | ||
Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package i… | ||||
| CVE-2019-16776US | high8.1 | — | ||
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin… | ||||
| CVE-2019-16775US | medium6.5 | — | ||
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through… | ||||
| CVE-2018-3750US | critical9.8 | — | ||
The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the struc… | ||||
| CVE-2018-3737US | high7.5 | — | ||
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys. | ||||
| CVE-2017-18077US | high7.5 | — | ||
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characte… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan