CVE:CVE-2020-8174
CNNVD:CNNVD-202006-291
Joyent Node.js是美国Joyent公司的一套建立在Google V8 JavaScript引擎之上的网络应用平台。该平台主要用于构建高度可伸缩的应用程序，以及编写能够处理数万条且同时连接到一个物理机的连接代码。
Joyent Node.js 10.21.0之前版本、12.18.0之前版本和14.4.0之前版本中的‘napi_get_value_string_latin1()’、‘napi_get_value_string_utf8()’和‘napi_get_value_string_utf16()’函数存在数字错误漏洞。远程攻击者可借助特制的数据利用该漏洞损坏内存并执行任意代码。
solution:Upgrade nodejs node.js to a higher version than 10.21.0,12.18.0,14.4.0,and avoid the version (,10.21.0),[12.0.0,12.18.0),[14.0.0,14.4.0); Upgrade oracle banking_extensibility_workbench to a higher version than 14.3.0,14.4.0,and avoid the version 14.3.0,14.4.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle mysql_cluster to a higher version than 7.3.30,7.4.29,7.5.19,7.6.15,8.0.21,and avoid the version (,7.3.30],[7.4.0,7.4.29],[7.5.0,7.5.19],[7.6.0,7.6.15],[8.0.0,8.0.21]; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -