CVE-2018-12115
First published: Sun Aug 12 2018(Updated: )
CVE-2018-7167 Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS "Boron"), 8.x (LTS "Carbon"), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable. CVE-2018-12115 In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written. CVE-2018-12116 Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.
Credit: cve-request@iojs.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/nodejs | <10.9.0 | 10.9.0 |
| redhat/nodejs | <8.11.4 | 8.11.4 |
| redhat/nodejs | <6.14.4 | 6.14.4 |
| Node.js | <6.14.4 | |
| Node.js | >=8.0.0<8.11.4 | |
| Node.js | >=10.0.0<10.9.0 | |
| redhat openshift container platform | =3.11 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=17.1.0<=17.1.2 | 17.5.0 |
| F5 BIG-IP and BIG-IQ Centralized Management | >=16.1.0<=16.1.5 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=15.1.0<=15.1.10 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=14.1.0<=14.1.5 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=13.1.0<=13.1.5 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=8.0.0<=8.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/105127
- https://access.redhat.com/errata/RHSA-2018:2552
- https://access.redhat.com/errata/RHSA-2018:2553
- https://access.redhat.com/errata/RHSA-2018:2944
- https://access.redhat.com/errata/RHSA-2018:2949
- https://access.redhat.com/errata/RHSA-2018:3537
- https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/
- https://security.gentoo.org/glsa/202003-48
- https://github.com/nodejs/node/commit/fc14d812b7
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1621655
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1621656
- https://github.com/openshift/jenkins/blob/8e1ab16fb5f44d6570018c5dfa3407692fdba6e5/2/contrib/jenkins/kube-slave-common.sh#L27-L33
- https://nodejs.org/en/blog/release/v6.14.4/
- https://nodejs.org/en/blog/release/v8.11.4/
- https://nodejs.org/en/blog/release/v10.9.0/
- https://bugzilla.redhat.com/show_bug.cgi?id=1620219
- https://my.f5.com/manage/s/article/K000137093
Frequently Asked Questions
What is the severity of CVE-2018-12115?
CVE-2018-12115 has been classified as a Denial of Service vulnerability.
How do I fix CVE-2018-12115?
To mitigate CVE-2018-12115, update Node.js to versions 6.14.4, 8.11.4, or 10.9.0.
What software is affected by CVE-2018-12115?
CVE-2018-12115 affects specific versions of Node.js and F5 BIG-IP products.
Can CVE-2018-12115 be exploited remotely?
Yes, CVE-2018-12115 can be exploited remotely, potentially leading to denial of service.
What are the symptoms of an exploit of CVE-2018-12115?
The primary symptom of an exploit of CVE-2018-12115 is a hang in the application, resulting in a denial of service.
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-12115
- agent/software-canonical-lookup
- agent/weakness
- agent/author
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/tags
- agent/last-modified-date
- agent/softwarecombine
- collector/f5-advisory
- source/F5
- alias/CVE-2018-7167
- alias/CVE-2018-12116
- package-manager/redhat
- vendor/nodejs
- canonical/node.js
- version/node.js/8.0.0
- version/node.js/10.0.0
- vendor/redhat
- canonical/redhat openshift container platform
- version/redhat openshift container platform/3.11
- vendor/f5
- canonical/f5 big-ip and big-iq centralized management
- version/f5 big-ip and big-iq centralized management/17.1.0
- version/f5 big-ip and big-iq centralized management/17.1.2
- version/f5 big-ip and big-iq centralized management/16.1.0
- version/f5 big-ip and big-iq centralized management/16.1.5
- version/f5 big-ip and big-iq centralized management/15.1.0
- version/f5 big-ip and big-iq centralized management/15.1.10
- version/f5 big-ip and big-iq centralized management/14.1.0
- version/f5 big-ip and big-iq centralized management/14.1.5
- version/f5 big-ip and big-iq centralized management/13.1.0
- version/f5 big-ip and big-iq centralized management/13.1.5
- version/f5 big-ip and big-iq centralized management/8.0.0
- version/f5 big-ip and big-iq centralized management/8.4.0