| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| node.js | ≥ 10.0.0, < 10.24.0≥ 12.0.0, < 12.21.0≥ 14.0.0, < 14.16.0≥ 15.0.0, < 15.10.0 | 10.24.012.21.014.16.015.10.0 |
| graalvm | = 19.3.5= 20.3.1.2= 21.0.0.2 | |
| jd edwards enterpriseone tools | < 9.2.6.0 | 9.2.6.0 |
| mysql cluster | ≤ 8.0.25 | |
| nosql database | < 20.3 | 20.3 |
| peoplesoft enterprise peopletools | = 8.58= 8.59 | |
| sinec infrastructure network services | < 1.0.1.1 | 1.0.1.1 |
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン