RHSA-2024:3544HighCVSS 7.5

Red Hat Security Advisory: nodejs:18 security update

Published
June 3, 2024
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2024-27983 →CVE-2024-28182 →

📋 Description

CVE-2024-27983 — nodejs: CONTINUATION frames DoS CVE-2024-28182 — nghttp2: CONTINUATION frames DoS

🎯 Affected products32

  • Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debuginfo-1:18.20.2-2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debuginfo-1:18.20.2-2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debuginfo-1:18.20.2-2.module+el9.2.0+21812+f1e61652.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debuginfo-1:18.20.2-2.module+el9.2.0+21812+f1e61652.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debugsource-1:18.20.2-2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debugsource-1:18.20.2-2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debugsource-1:18.20.2-2.module+el9.2.0+21812+f1e61652.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-debugsource-1:18.20.2-2.module+el9.2.0+21812+f1e61652.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-devel-1:18.20.2-2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-devel-1:18.20.2-2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-devel-1:18.20.2-2.module+el9.2.0+21812+f1e61652.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-devel-1:18.20.2-2.module+el9.2.0+21812+f1e61652.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-docs-1:18.20.2-2.module+el9.2.0+21812+f1e61652.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-full-i18n-1:18.20.2-2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-full-i18n-1:18.20.2-2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-full-i18n-1:18.20.2-2.module+el9.2.0+21812+f1e61652.s390x (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-full-i18n-1:18.20.2-2.module+el9.2.0+21812+f1e61652.x86_64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-nodemon-0:3.0.1-1.module+el9.2.0.z+19753+58118bc0.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-nodemon-0:3.0.1-1.module+el9.2.0.z+19753+58118bc0.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-packaging-0:2021.06-4.module+el9.1.0+15718+e52ec601.src (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • nodejs-packaging-bundler-0:2021.06-4.module+el9.1.0+15718+e52ec601.noarch (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • npm-1:10.5.0-1.18.20.2.2.module+el9.2.0+21812+f1e61652.aarch64 (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • npm-1:10.5.0-1.18.20.2.2.module+el9.2.0+21812+f1e61652.ppc64le (nodejs:18) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)
  • +2 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (5)