CVE-2015-8027
EUVD-2015-792202.01.2016, 21:59
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| nodejs | node.js | 0.12.0 |
| nodejs | node.js | 0.12.1 |
| nodejs | node.js | 0.12.2 |
| nodejs | node.js | 0.12.3 |
| nodejs | node.js | 0.12.4 |
| nodejs | node.js | 0.12.5 |
| nodejs | node.js | 0.12.6 |
| nodejs | node.js | 0.12.7 |
| nodejs | node.js | 0.12.8 |
| nodejs | node.js | 4.2.0 |
| nodejs | node.js | 4.2.1 |
| nodejs | node.js | 4.2.2 |
| nodejs | node.js | 5.0.0 |
| nodejs | node.js | 5.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References