Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-8252

The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.

  • Published: Sep 18, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-8252
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
nodejs / node.js 14.0.0 14.9.0
nodejs / node.js 12.0.0 12.18.4
nodejs / node.js 10.0.0 10.22.1
opensuse / leap 15.2 15.2.x
fedoraproject / fedora 33 33.x