CVE-2016-7099
UnknownEPSS 2.84%
Last modified
CVE-2016-7099 is a vulnerability of currently unknown severity. The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.. EPSS estimates a 2.84% chance of exploitation in the next 30 days.
Description
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nodejs | Node.Js | 0.10.0 |
| Nodejs | Node.Js | 0.10.1 |
| Nodejs | Node.Js | 0.10.2 |
| Nodejs | Node.Js | 0.10.3 |
| Nodejs | Node.Js | 0.10.4 |
| Nodejs | Node.Js | 0.10.5 |
| Nodejs | Node.Js | 0.10.6 |
| Nodejs | Node.Js | 0.10.7 |
| Nodejs | Node.Js | 0.10.8 |
| Nodejs | Node.Js | 0.10.9 |
| Nodejs | Node.Js | 0.10.10 |
| Nodejs | Node.Js | 0.10.11 |
| Nodejs | Node.Js | 0.10.12 |
| Nodejs | Node.Js | 0.10.13 |
| Nodejs | Node.Js | 0.10.14 |
| Nodejs | Node.Js | 0.10.15 |
| Nodejs | Node.Js | 0.10.16 |
| Nodejs | Node.Js | 0.10.16-isaacs-manual |
| Nodejs | Node.Js | 0.10.17 |
| Nodejs | Node.Js | 0.10.18 |
| Nodejs | Node.Js | 0.10.19 |
| Nodejs | Node.Js | 0.10.20 |
| Nodejs | Node.Js | 0.10.21 |
| Nodejs | Node.Js | 0.10.22 |
| Nodejs | Node.Js | 0.10.23 |
| Nodejs | Node.Js | 0.10.24 |
| Nodejs | Node.Js | 0.10.25 |
| Nodejs | Node.Js | 0.10.26 |
| Nodejs | Node.Js | 0.10.27 |
| Nodejs | Node.Js | 0.10.28 |
| Nodejs | Node.Js | 0.10.29 |
| Nodejs | Node.Js | 0.10.30 |
| Nodejs | Node.Js | 0.10.31 |
| Nodejs | Node.Js | 0.10.32 |
| Nodejs | Node.Js | 0.10.33 |
| Nodejs | Node.Js | 0.10.34 |
| Nodejs | Node.Js | 0.10.35 |
| Nodejs | Node.Js | 0.10.36 |
| Nodejs | Node.Js | 0.10.37 |
| Nodejs | Node.Js | 0.10.38 |
| Nodejs | Node.Js | 0.10.39 |
| Nodejs | Node.Js | 0.10.40 |
| Nodejs | Node.Js | 0.10.41 |
| Nodejs | Node.Js | 0.10.42 |
| Nodejs | Node.Js | 0.10.43 |
| Nodejs | Node.Js | 0.10.44 |
| Nodejs | Node.Js | 0.10.45 |
| Nodejs | Node.Js | 0.10.46 |
| Suse | Linux Enterprise | 12.0 |
| Nodejs | Node.Js | 6.0.0 |
Showing 50 of 98 affected configurations. See NVD for the full list.
References
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.htmlThird Party Advisory
- http://www.securityfocus.com/bid/93191Third Party Advisory, VDB Entry
- https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20bIssue Tracking, Patch
- https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.htmlThird Party Advisory
- http://www.securityfocus.com/bid/93191Third Party Advisory, VDB Entry
- https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20bIssue Tracking, Patch
- https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-7099?
The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
How severe is CVE-2016-7099?
Severity scoring for CVE-2016-7099 is pending analysis. The EPSS model estimates a 2.84% probability of exploitation in the next 30 days.
How do I fix CVE-2016-7099?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-7092The get_page_from_l3e function in arch/x86/mm.c in Xen allow…
- CVE-2016-7093Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS adminis…
- CVE-2016-7094Buffer overflow in Xen 4.7.x and earlier allows local x86 HV…
- CVE-2016-7095Exponent CMS before 2.3.9 is vulnerable to an attacker uploa…
- CVE-2016-7097The filesystem implementation in the Linux kernel through 4.…
- CVE-2016-7098Race condition in wget 1.17 and earlier, when used in recurs…
- CVE-2016-7101The SGI coder in ImageMagick before 7.0.2-10 allows remote a…6.5
- CVE-2016-7102ownCloud Desktop before 2.2.3 allows local users to execute …
- CVE-2016-7103Cross-site scripting (XSS) vulnerability in jQuery UI before…6.1
- CVE-2016-7107Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
- CVE-2016-7108Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
- CVE-2016-7109Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
Are you affected by CVE-2016-7099?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST