CVE:CVE-2020-8252
CNNVD:CNNVD-202009-950
Node.js是一个开源、跨平台的 JavaScript 运行时环境。
Node.js 存在缓冲区错误漏洞，该漏洞源于fs.realpath.native，攻击者可利用该漏洞运行代码。
solution:Upgrade nodejs node.js to a higher version than 10.22.1,12.18.4,14.9.0,and avoid the version [10.0.0,10.22.1),[12.0.0,12.18.4),[14.0.0,14.9.0); Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33