napigetvaluestring*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"vendor_product": "oracle:banking_extensibility_workbench",
"cpes": [
"cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:banking_extensibility_workbench:14.4.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "14.3.0"
},
{
"last_affected": "14.4.0"
}
]
},
{
"source": "CPE_FIELD",
"vendor_product": "oracle:blockchain_platform",
"extracted_events": [
{
"fixed": "21.1.2"
}
],
"cpes": [
"cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*"
]
},
{
"source": "CPE_FIELD",
"vendor_product": "oracle:mysql_cluster",
"cpes": [
"cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "7.3.30"
},
{
"introduced": "7.4.0"
},
{
"last_affected": "7.4.29"
},
{
"introduced": "7.5.0"
},
{
"last_affected": "7.5.19"
},
{
"introduced": "7.6.0"
},
{
"last_affected": "7.6.15"
},
{
"introduced": "8.0.0"
},
{
"last_affected": "8.0.21"
}
]
},
{
"source": "CPE_FIELD",
"vendor_product": "oracle:retail_xstore_point_of_service",
"cpes": [
"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "16.0.6"
},
{
"last_affected": "17.0.4"
},
{
"last_affected": "18.0.3"
},
{
"last_affected": "19.0.2"
},
{
"last_affected": "20.0.1"
}
]
}
]
}{
"cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "10.21.0"
},
{
"introduced": "12.0.0"
},
{
"fixed": "12.18.0"
},
{
"introduced": "14.0.0"
},
{
"fixed": "14.4.0"
}
]
}