Skip to content

Commit

Permalink
vuln/core: CR fixes 2
Browse files Browse the repository at this point in the history
  • Loading branch information
srmish-jfrog authored Sep 12, 2024
1 parent 3d1a9e9 commit c930825
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion vuln/core/54.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
"vulnerable": "<= 10",
"patched": "^6.14.4 || ^8.11.4 || >= 10.9.0",
"publish_date": "2018-08-16",
"author": "\u0421\u043a\u043e\u0432\u043e\u0440\u043e\u0434\u0430 \u041d\u0438\u043a\u0438\u0442\u0430 \u0410\u043d\u0434\u0440\u0435\u0435\u0432\u0438\u0447 (Nikita Skovoroda / @ChALkeR)",
"author": "Сковорода Никита Андреевич (Nikita Skovoroda / @ChALkeR)",
"ref": "https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/",
"type": "CWE-787: Out-of-bounds Write",
"overview": "When used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written.",
Expand Down

0 comments on commit c930825

Please sign in to comment.