Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 11/12/2017 Updated: 01/09/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 3.1 | Impact Score: 1.4 | Exploitability Score: 1.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nodejs node.js

Nodejs had a bug in versions 8X and 9X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified For example, 'Bufferalloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases ...

CWE-665 https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-15897

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-15897

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect