Oval Definition:oval:com.ubuntu.trusty:def:201812120000
Revision Date:2018-11-28Version:1
Title:CVE-2018-12120 on Ubuntu 14.04 LTS (trusty) - medium.
Description:Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as `node --debug=localhost`. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-12120
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND NOT While related to the CVE in some way, the 'nodejs' package in trusty is not affected.
  • BACK