vulnerability

Oracle Solaris 11: CVE-2020-8252 (11.4 SRU 30.88.3)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Sep 18, 2020
Added
Feb 17, 2021
Modified
Feb 17, 2022

Description

The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.

Solutions

oracle-solaris-11-4-upgrade-runtime-nodejs-12-19-1-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-10-10-22-1-11-4-30-0-1-88-0oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-12-12-19-1-11-4-30-0-1-88-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.