Fluid Attacks Database

Description

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	nodejs	>=0 <4.2.3~dfsg-1	4.2.3~dfsg-1
debian 11	nodejs	>=0 <4.2.3~dfsg-1	4.2.3~dfsg-1
debian 12	nodejs	>=0 <4.2.3~dfsg-1	4.2.3~dfsg-1
debian 13	nodejs	>=0 <4.2.3~dfsg-1	4.2.3~dfsg-1

Aliases

1. CVE-2015-80272. NVD-2015-80273. OSV-DEBIAN-2015-80274. OSV-2015-80275. SECURITY-TRACKER-CVE-2015-8027

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.