Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-15897

Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nodejs

Description

Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer.alloc(0x100, "This is not correctly encoded", "hex");' The buffer implementation was updated such that the buffer will be initialized to all zeros in these cases.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Node.js Project Node.js

  • 8.0 and higheraffected
  • 9.0 and higheraffected

References