Rocky Linux: CVE-2023-44487: nodejs-16 (Multiple Advisories)
4
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
10/10/2023
03/07/2024
03/05/2024
08/28/2024
Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Solution(s)
- rocky-upgrade-aspnetcore-runtime-6.0
- rocky-upgrade-aspnetcore-targeting-pack-6.0
- rocky-upgrade-delve
- rocky-upgrade-delve-debuginfo
- rocky-upgrade-delve-debugsource
- rocky-upgrade-dotnet-apphost-pack-6.0
- rocky-upgrade-dotnet-apphost-pack-6.0-debuginfo
- rocky-upgrade-dotnet-hostfxr-6.0
- rocky-upgrade-dotnet-hostfxr-6.0-debuginfo
- rocky-upgrade-dotnet-runtime-6.0
- rocky-upgrade-dotnet-runtime-6.0-debuginfo
- rocky-upgrade-dotnet-sdk-6.0
- rocky-upgrade-dotnet-sdk-6.0-debuginfo
- rocky-upgrade-dotnet-sdk-6.0-source-built-artifacts
- rocky-upgrade-dotnet-targeting-pack-6.0
- rocky-upgrade-dotnet-templates-6.0
- rocky-upgrade-go-toolset
- rocky-upgrade-golang
- rocky-upgrade-golang-bin
- rocky-upgrade-golang-race
- rocky-upgrade-grafana
- rocky-upgrade-grafana-debuginfo
- rocky-upgrade-libdb-cxx
- rocky-upgrade-libdb-cxx-debuginfo
- rocky-upgrade-libdb-debuginfo
- rocky-upgrade-libdb-debugsource
- rocky-upgrade-libdb-sql-debuginfo
- rocky-upgrade-libdb-sql-devel-debuginfo
- rocky-upgrade-libdb-utils-debuginfo
- rocky-upgrade-libnghttp2
- rocky-upgrade-libnghttp2-debuginfo
- rocky-upgrade-libnghttp2-devel
- rocky-upgrade-nghttp2
- rocky-upgrade-nghttp2-debuginfo
- rocky-upgrade-nghttp2-debugsource
- rocky-upgrade-nginx
- rocky-upgrade-nginx-core
- rocky-upgrade-nginx-core-debuginfo
- rocky-upgrade-nginx-debuginfo
- rocky-upgrade-nginx-debugsource
- rocky-upgrade-nginx-mod-devel
- rocky-upgrade-nginx-mod-http-image-filter
- rocky-upgrade-nginx-mod-http-image-filter-debuginfo
- rocky-upgrade-nginx-mod-http-perl
- rocky-upgrade-nginx-mod-http-perl-debuginfo
- rocky-upgrade-nginx-mod-http-xslt-filter
- rocky-upgrade-nginx-mod-http-xslt-filter-debuginfo
- rocky-upgrade-nginx-mod-mail
- rocky-upgrade-nginx-mod-mail-debuginfo
- rocky-upgrade-nginx-mod-stream
- rocky-upgrade-nginx-mod-stream-debuginfo
- rocky-upgrade-nodejs
- rocky-upgrade-nodejs-debuginfo
- rocky-upgrade-nodejs-debugsource
- rocky-upgrade-nodejs-devel
- rocky-upgrade-nodejs-full-i18n
- rocky-upgrade-nodejs-libs
- rocky-upgrade-nodejs-libs-debuginfo
- rocky-upgrade-npm
- rocky-upgrade-varnish
- rocky-upgrade-varnish-devel
- rocky-upgrade-varnish-docs
- rocky-upgrade-varnish-modules
- rocky-upgrade-varnish-modules-debuginfo
- rocky-upgrade-varnish-modules-debugsource
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center