Alpine: nodejs: security update to 16.19.1-r0

high Tenable Self-Hosted Container Security Plugin ID 405818

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made
it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in
Node.js and access non authorized modules by using process.mainModule.require(). This only affects users
who had enabled the experimental permissions option with --experimental-policy. (CVE-2023-23918)

- A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases
did does not clear the OpenSSL error stack after operations that may set it. This may lead to false
positive errors during subsequent cryptographic operations that happen to be on the same thread. This in
turn could be used to cause a denial of service. (CVE-2023-23919)

- An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that
could allow an attacker to search and potentially load ICU data when running with elevated privileges.
(CVE-2023-23920)

- Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the
undici library does not protect `host` HTTP header from CRLF injection vulnerabilities. This issue is
patched in Undici v5.19.1. As a workaround, sanitize the `headers.host` string before passing to undici.
(CVE-2023-23936)

- Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and
`Headers.append()` methods are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when
untrusted values are passed into the functions. This is due to the inefficient regular expression used to
normalize the values in the `headerValueNormalize()` utility function. This vulnerability was patched in
v5.19.1. No known workarounds are available. (CVE-2023-24807)

Plugin Details

Severity: High

ID: 405818

Version: Revision 1.25

Type: Local

Family: Alpine Linux Local Security Checks

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 95.11

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2023-23918

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 2/16/2023

Reference Information

CVE: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920, CVE-2023-23936, CVE-2023-24807

Detections

Analytics