RHSA-2024:4824HighCVSS 7.5

Red Hat Security Advisory: nodejs:18 security update

Published
July 24, 2024
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2024-27983 →CVE-2024-28182 →

📋 Description

CVE-2024-27983 — nodejs: CONTINUATION frames DoS CVE-2024-28182 — nghttp2: CONTINUATION frames DoS

🎯 Affected products32

  • Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debuginfo-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debuginfo-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debuginfo-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debuginfo-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debugsource-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debugsource-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debugsource-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-debugsource-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-devel-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-devel-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-devel-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-devel-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-docs-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-full-i18n-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-full-i18n-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-full-i18n-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-full-i18n-1:18.19.1-3.module+el8.8.0+22005+6f8bb252.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-nodemon-0:3.0.1-1.module+el8.8.0+19757+8ca87034.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-nodemon-0:3.0.1-1.module+el8.8.0+19757+8ca87034.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-packaging-0:2021.06-4.module+el8.7.0+15582+19c314fa.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-packaging-0:2021.06-4.module+el8.7.0+15582+19c314fa.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • nodejs-packaging-bundler-0:2021.06-4.module+el8.7.0+15582+19c314fa.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • npm-1:10.2.4-1.18.19.1.3.module+el8.8.0+22005+6f8bb252.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • npm-1:10.2.4-1.18.19.1.3.module+el8.8.0+22005+6f8bb252.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (5)