Vulnerabilities > CVE-2023-23919 - Unspecified vulnerability in Nodejs Node.Js

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nodejs

NVD

Published: 2023-02-23

Updated: 2023-03-16

Summary

A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.

Vulnerable Configurations

Part	Description	Count
Application	Nodejs Nodejs Node.Js 14.8.0 Nodejs Node.Js 14.9.0 Nodejs Node.Js 14.10.0 Nodejs Node.Js 14.10.1 Nodejs Node.Js 14.11.0 Nodejs Node.Js 14.12.0 Nodejs Node.Js 14.13.0 Nodejs Node.Js 14.13.1 Nodejs Node.Js 14.14.0 Nodejs Node.Js 16.4.0 Nodejs Node.Js 16.4.1 Nodejs Node.Js 16.4.2 Nodejs Node.Js 16.5.0 Nodejs Node.Js 16.7.0 Nodejs Node.Js 16.8.0 Nodejs Node.Js 16.9.0 Nodejs Node.Js 16.9.1 Nodejs Node.Js 16.10.0 Nodejs Node.Js 16.11.0 Nodejs Node.Js 16.11.1 Nodejs Node.Js 16.12.0 Nodejs Node.Js 18.0.0 Nodejs Node.Js 18.0.1 Nodejs Node.Js 18.0.2 Nodejs Node.Js 18.0.3 Nodejs Node.Js 18.0.4 Nodejs Node.Js 18.0.5 Nodejs Node.Js 18.0.6 Nodejs Node.Js 18.1.0 Nodejs Node.Js 18.2.0 Nodejs Node.Js 18.3.0 Nodejs Node.Js 18.4.0 Nodejs Node.Js 18.5.0 Nodejs Node.Js 18.6.0 Nodejs Node.Js 18.7.0 Nodejs Node.Js 18.8.0 Nodejs Node.Js 18.9.0 Nodejs Node.Js 18.9.1 Nodejs Node.Js 18.10.0 Nodejs Node.Js 18.11.0 Nodejs Node.Js 18.12.0 Nodejs Node.Js 18.12.1 Nodejs Node.Js 18.13.0 Nodejs Node.Js 18.14.0 Nodejs Node.Js 16.0.0 Nodejs Node.Js 16.13.0 Nodejs Node.Js 16.13.1 Nodejs Node.Js 16.13.2 Nodejs Node.Js 16.14.0 Nodejs Node.Js 16.14.1 Nodejs Node.Js 16.14.2 Nodejs Node.Js 16.15.0 Nodejs Node.Js 16.15.1 Nodejs Node.Js 16.16.0 Nodejs Node.Js 16.17.0 Nodejs Node.Js 16.17.1 Nodejs Node.Js 16.18.0 Nodejs Node.Js 16.18.1 Nodejs Node.Js 16.19.0 Nodejs Node.Js 14.0.0 Nodejs Node.Js 14.1.0 Nodejs Node.Js 14.2.0 Nodejs Node.Js 14.3.0 Nodejs Node.Js 14.4.0 Nodejs Node.Js 14.5.0 Nodejs Node.Js 14.6.0 Nodejs Node.Js 14.7.0 Nodejs Node.Js 14.15.0 Nodejs Node.Js 14.15.1 Nodejs Node.Js 14.15.2 Nodejs Node.Js 14.15.3 Nodejs Node.Js 14.15.4 Nodejs Node.Js 14.15.5 Nodejs Node.Js 14.16.0 Nodejs Node.Js 14.16.1 Nodejs Node.Js 14.17.0 Nodejs Node.Js 14.17.1 Nodejs Node.Js 14.17.2 Nodejs Node.Js 14.17.3 Nodejs Node.Js 14.17.4 Nodejs Node.Js 14.17.5 Nodejs Node.Js 14.17.6 Nodejs Node.Js 14.18.0 Nodejs Node.Js 14.18.1 Nodejs Node.Js 14.18.2 Nodejs Node.Js 14.18.3 Nodejs Node.Js 14.19.0 Nodejs Node.Js 14.19.1 Nodejs Node.Js 14.19.2 Nodejs Node.Js 14.19.3 Nodejs Node.Js 14.20.0 Nodejs Node.Js 14.20.1 Nodejs Node.Js 14.21.0 Nodejs Node.Js 14.21.1 Nodejs Node.Js 14.21.2 Nodejs Node.Js 19.0.0 Nodejs Node.Js 19.0.1 Nodejs Node.Js 19.1.0	108

Summary

Vulnerable Configurations

References