The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0730-1 advisory.

    Update to 18.19.1: (security updates)

    * CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992).
    * CVE-2024-22019: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks     (bsc#1219993).
    * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack     against PKCS#1 v1.5 padding) (bsc#1219997).
    * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding (bsc#1220014).
    * CVE-2024-24758: undici version 5.28.3 (bsc#1220017).
    * CVE-2024-24806: libuv version 1.48.0 (bsc#1219724).

    Update to LTS version 18.19.0

    * deps: npm updates to 10.x
    * esm:
      - Leverage loaders when resolving subsequent loaders
      - import.meta.resolve unflagged
      - --experimental-default-type flag to flip module defaults

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 / openSUSE 15 Security Update : nodejs18 (SUSE-SU-2024:0730-1)

high Nessus Plugin ID 191451

Version 1.3

Version 1.1

Version 1.0

Version 1.3 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.1 Mar 2, 2024, 8:57 AM Plugin metadata Plugin Feed: 202403020857
Version 1.0 Mar 1, 2024, 7:31 AM New Plugin Feed: 202403010731