Nodejs Core 安全漏洞

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法：

https://bugzilla.redhat.com/show_bug.cgi?id=1932024

来源:MISC

链接:https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210723-0001/

来源:N/A

链接:https://www.oracle.com//security-alerts/cpujul2021.html

来源:MISC

链接:https://hackerone.com/reports/1069487

来源:MISC

链接:https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/#node-js-inspector-dns-rebinding-vulnerability-cve-2018-7160

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210416-0001/

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuApr2021.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-22884

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-cloud-pak-for-security-contains-security-vulnerabilities/

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuoct2021.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021072765

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-node-js-affect-ibm-infosphere-information-server/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-node-js-3/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0730

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-potential-vulnerability-with-node-js-3/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161794/Red-Hat-Security-Advisory-2021-0827-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0814

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0756

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-xstream-java-openssl-websphere-application-server-liberty-and-node-js-affect-ibm-spectrum-control/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-integration-bus-ibm-app-connect-enterprise-v11-are-affected-by-vulnerabilities-in-node-js-cve-2021-22884-cve-2021-22883-2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-api-connect-is-impacted-by-vulnerabilities-in-node-js-and-openssl-cve-2021-23840-cve-2021-22884-cve-2021-22883/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2641

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpujul2021.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Node-Core-code-execution-via-DNS-Rebinding-Localhost6-34655

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-sdk-for-node-js-in-ibm-cloud-5/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-app-connect-enterprise-certified-container-may-be-vulnerable-to-multiple-denial-of-service-through-the-node-js-runtime/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-integration-bus-ibm-app-connect-enterprise-v11-are-affected-by-vulnerabilities-in-node-js-cve-2021-22884-cve-2021-22883/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161665/Red-Hat-Security-Advisory-2021-0734-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0908

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161681/Red-Hat-Security-Advisory-2021-0739-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0686

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021072059

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2649

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-mongodb-node-js-docker-and-xstream-affect-ibm-spectrum-protect-plus/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0795

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-event-streams-is-potentially-affected-by-multiple-node-vulnerabilities/