CVE-2020-8174
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
- Score
- CVSS 3.1 8.1 High
- Status
- Modified - support@hackerone.com
- Published
- 2020-07-24
- Last modified
- 2024-08-04
- Weaknesses
- CWE-119, CWE-191
Affected products
- Active Iq Unified Manager (Netapp)
- Oncommand Insight (Netapp)
- Oncommand Workflow Automation (Netapp)
- Snapcenter (Netapp)
- Node.js (Nodejs)
- Banking Extensibility Workbench (Oracle)
- Blockchain Platform (Oracle)
- Mysql Cluster (Oracle)
- Retail Xstore Point Of Service (Oracle)
References
- https://hackerone.com/reports/784186
- https://security.gentoo.org/glsa/202101-07
- https://security.netapp.com/advisory/ntap-20201023-0003/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
