CVE-2016-7099

Source
https://cve.org/CVERecord?id=CVE-2016-7099
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7099.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-7099
Downstream
DEBIAN (1)
MGASA (1)
openSUSE (1)
RHSA (1)
SUSE (3)
UBUNTU (1)
Related
Published
2016-10-10T16:59:01Z
Modified
2026-10-22T02:45:38Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type
GIT
Repo
https://github.com/nodejs/node
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.0"
                },
                {
                    "last_affected":  "0.10.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.1"
                },
                {
                    "last_affected":  "0.10.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.2"
                },
                {
                    "last_affected":  "0.10.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.3"
                },
                {
                    "last_affected":  "0.10.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.4"
                },
                {
                    "last_affected":  "0.10.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.5"
                },
                {
                    "last_affected":  "0.10.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.6"
                },
                {
                    "last_affected":  "0.10.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.7"
                },
                {
                    "last_affected":  "0.10.7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.8:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.8"
                },
                {
                    "last_affected":  "0.10.8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.9:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.9"
                },
                {
                    "last_affected":  "0.10.9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.10:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.10"
                },
                {
                    "last_affected":  "0.10.10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.11:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.11"
                },
                {
                    "last_affected":  "0.10.11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.12:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.12"
                },
                {
                    "last_affected":  "0.10.12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.13:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.13"
                },
                {
                    "last_affected":  "0.10.13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.14:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.14"
                },
                {
                    "last_affected":  "0.10.14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.15:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.15"
                },
                {
                    "last_affected":  "0.10.15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.16:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.16"
                },
                {
                    "last_affected":  "0.10.16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.16-isaacs-manual:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.16-isaacs-manual"
                },
                {
                    "last_affected":  "0.10.16-isaacs-manual"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.17:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.17"
                },
                {
                    "last_affected":  "0.10.17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.18:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.18"
                },
                {
                    "last_affected":  "0.10.18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.19:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.19"
                },
                {
                    "last_affected":  "0.10.19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.20:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.20"
                },
                {
                    "last_affected":  "0.10.20"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.21:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.21"
                },
                {
                    "last_affected":  "0.10.21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.22:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.22"
                },
                {
                    "last_affected":  "0.10.22"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.23:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.23"
                },
                {
                    "last_affected":  "0.10.23"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.24:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.24"
                },
                {
                    "last_affected":  "0.10.24"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.25:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.25"
                },
                {
                    "last_affected":  "0.10.25"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.26:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.26"
                },
                {
                    "last_affected":  "0.10.26"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.27:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.27"
                },
                {
                    "last_affected":  "0.10.27"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.28:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.28"
                },
                {
                    "last_affected":  "0.10.28"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.29:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.29"
                },
                {
                    "last_affected":  "0.10.29"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.30:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.30"
                },
                {
                    "last_affected":  "0.10.30"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.31:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.31"
                },
                {
                    "last_affected":  "0.10.31"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.32:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.32"
                },
                {
                    "last_affected":  "0.10.32"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.33:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.33"
                },
                {
                    "last_affected":  "0.10.33"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.34:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.34"
                },
                {
                    "last_affected":  "0.10.34"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.35:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.35"
                },
                {
                    "last_affected":  "0.10.35"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.36:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.36"
                },
                {
                    "last_affected":  "0.10.36"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.37:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.37"
                },
                {
                    "last_affected":  "0.10.37"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.38:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.38"
                },
                {
                    "last_affected":  "0.10.38"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.39:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.39"
                },
                {
                    "last_affected":  "0.10.39"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.40:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.40"
                },
                {
                    "last_affected":  "0.10.40"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.41:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.41"
                },
                {
                    "last_affected":  "0.10.41"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.42:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.42"
                },
                {
                    "last_affected":  "0.10.42"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.43:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.43"
                },
                {
                    "last_affected":  "0.10.43"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.44:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.44"
                },
                {
                    "last_affected":  "0.10.44"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.45:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.45"
                },
                {
                    "last_affected":  "0.10.45"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.10.46:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.10.46"
                },
                {
                    "last_affected":  "0.10.46"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "12.0"
                },
                {
                    "last_affected":  "12.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.0.0"
                },
                {
                    "last_affected":  "6.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.1.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.1.0"
                },
                {
                    "last_affected":  "6.1.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.2.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.2.0"
                },
                {
                    "last_affected":  "6.2.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.2.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.2.1"
                },
                {
                    "last_affected":  "6.2.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.2.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.2.2"
                },
                {
                    "last_affected":  "6.2.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.3.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.3.0"
                },
                {
                    "last_affected":  "6.3.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.3.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.3.1"
                },
                {
                    "last_affected":  "6.3.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.4.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.4.0"
                },
                {
                    "last_affected":  "6.4.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.5.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.5.0"
                },
                {
                    "last_affected":  "6.5.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:6.6.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.6.0"
                },
                {
                    "last_affected":  "6.6.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.0"
                },
                {
                    "last_affected":  "0.12.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.1"
                },
                {
                    "last_affected":  "0.12.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.2"
                },
                {
                    "last_affected":  "0.12.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.3"
                },
                {
                    "last_affected":  "0.12.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.4"
                },
                {
                    "last_affected":  "0.12.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.5"
                },
                {
                    "last_affected":  "0.12.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.6"
                },
                {
                    "last_affected":  "0.12.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.7"
                },
                {
                    "last_affected":  "0.12.7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.8:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.8"
                },
                {
                    "last_affected":  "0.12.8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.9:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.9"
                },
                {
                    "last_affected":  "0.12.9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.10:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.10"
                },
                {
                    "last_affected":  "0.12.10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.11:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.11"
                },
                {
                    "last_affected":  "0.12.11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.12:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.12"
                },
                {
                    "last_affected":  "0.12.12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.13:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.13"
                },
                {
                    "last_affected":  "0.12.13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.14:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.14"
                },
                {
                    "last_affected":  "0.12.14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:0.12.15:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0.12.15"
                },
                {
                    "last_affected":  "0.12.15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.0.0"
                },
                {
                    "last_affected":  "4.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.1.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.1.0"
                },
                {
                    "last_affected":  "4.1.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.1.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.1.1"
                },
                {
                    "last_affected":  "4.1.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.1.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.1.2"
                },
                {
                    "last_affected":  "4.1.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.0"
                },
                {
                    "last_affected":  "4.2.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.1"
                },
                {
                    "last_affected":  "4.2.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.2"
                },
                {
                    "last_affected":  "4.2.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.3"
                },
                {
                    "last_affected":  "4.2.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.4"
                },
                {
                    "last_affected":  "4.2.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.5"
                },
                {
                    "last_affected":  "4.2.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.2.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.6"
                },
                {
                    "last_affected":  "4.2.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.3.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.3.0"
                },
                {
                    "last_affected":  "4.3.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.3.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.3.1"
                },
                {
                    "last_affected":  "4.3.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.3.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.3.2"
                },
                {
                    "last_affected":  "4.3.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.0"
                },
                {
                    "last_affected":  "4.4.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.1"
                },
                {
                    "last_affected":  "4.4.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.2"
                },
                {
                    "last_affected":  "4.4.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.3"
                },
                {
                    "last_affected":  "4.4.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.4"
                },
                {
                    "last_affected":  "4.4.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.5"
                },
                {
                    "last_affected":  "4.4.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.6"
                },
                {
                    "last_affected":  "4.4.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.4.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.7"
                },
                {
                    "last_affected":  "4.4.7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:nodejs:node.js:4.5.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.5.0"
                },
                {
                    "last_affected":  "4.5.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "range":  [
                {
                    "fixed":  "743f0c916469f3129dfae406fa104dc46782e20b"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

0.*
0.10.0
0.10.1
0.10.10
0.10.11
0.10.12
0.10.13
0.10.14
0.10.15
0.10.16
0.10.17
0.10.18
0.10.19
0.10.2
0.10.20
0.10.21
0.10.22
0.10.23
0.10.24
0.10.25
0.10.26
0.10.27
0.10.28
0.10.29
0.10.3
0.10.30
0.10.31
0.10.32
0.10.33
0.10.34
0.10.35
0.10.36
0.10.37
0.10.38
0.10.39
0.10.4
0.10.40
0.10.41
0.10.42
0.10.43
0.10.44
0.10.45
0.10.46
0.10.5
0.10.6
0.10.7
0.10.8
0.10.9
0.12.0
0.12.1
0.12.10
0.12.11
0.12.12
0.12.13
0.12.14
0.12.15
0.12.2
0.12.3
0.12.4
0.12.5
0.12.6
0.12.7
0.12.8
0.12.9
12.*
12.0
4.*
4.0.0
4.1.0
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
4.3.0
4.3.1
4.3.2
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.5.0
6.*
6.0.0
6.1.0
6.2.0
6.2.1
6.2.2
6.3.0
6.3.1
6.4.0
6.5.0
6.6.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7099.json"