CVE-2014-9748
11.02.2020, 17:15
The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.
| Vendor | Product | Version |
|---|---|---|
| libuv | libuv | 𝑥 < 1.7.4 |
| nodejs | node.js | 0.10.0 ≤ 𝑥 < 0.10.46 |
| nodejs | node.js | 0.12.0 ≤ 𝑥 < 0.12.15 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References