جزئیات آسیب‌پذیری
CVE-2025-55131
nodejs node
CVSS 3.1
7.1بالا
شرح رسمی (انگلیسی)
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L |
| 7.1بالا | 3.0 | CVEProject cvelistV5 (CNA) (hackerone) | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| nodejs | node | 10.0 ≤ v < 10.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 11.0 ≤ v < 11.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 12.0 ≤ v < 12.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 13.0 ≤ v < 13.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 14.0 ≤ v < 14.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 15.0 ≤ v < 15.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 16.0 ≤ v < 16.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 17.0 ≤ v < 17.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 18.0 ≤ v < 18.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 20.19.6 ≤ v ≤ 20.19.6 | CVEProject cvelistV5 (CNA) |
| nodejs | node | 22.21.1 ≤ v ≤ 22.21.1 | CVEProject cvelistV5 (CNA) |
| nodejs | node | 24.12.0 ≤ v ≤ 24.12.0 | CVEProject cvelistV5 (CNA) |
| nodejs | node | 25.2.1 ≤ v ≤ 25.2.1 | CVEProject cvelistV5 (CNA) |
| nodejs | node | 4.0 ≤ v < 4.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 5.0 ≤ v < 5.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 6.0 ≤ v < 6.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 7.0 ≤ v < 7.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 8.0 ≤ v < 8.* | CVEProject cvelistV5 (CNA) |
| nodejs | node | 9.0 ≤ v < 9.* | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://nodejs.org/en/blog/vulnerability/december-2025-security-releases
- https://access.redhat.com/security/cve/CVE-2025-55131 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2431350 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55131.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:2899 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1843 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1842 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2422 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2421 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2420 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2768 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2767 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2864 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2783 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2782 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2781 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7386 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6402 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6431 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۱/۰۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- hackerone
پیش‌بینی بهره‌برداری (EPSS)
۳٫۴۵٪
احتمال بهره‌برداری در ۳۰ روز
۸۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere