logo

Database

Asymmetric denial of service In nodejs

Description

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 22

10

Aliases

1. CVE-2018-121222. NVD-2018-121223. OSV-ALPINE-2018-121224. OSV-2018-121225. OSV-DEBIAN-2018-121226. GCVE-2018-121227. SECURITY-CVE-2018-121228. SECURITY-TRACKER-CVE-2018-121229. securityfocus.com10. access.redhat.com11. security.gentoo.org12. security.netapp.com

References

1. https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.