CVE-2017-14919
30.10.2017, 19:29
Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nodejs | node.js | 4.8.2 |
| nodejs | node.js | 4.8.3 |
| nodejs | node.js | 4.8.4 |
| nodejs | node.js | 6.10.2 |
| nodejs | node.js | 6.10.3 |
| nodejs | node.js | 6.11.0 |
| nodejs | node.js | 6.11.1 |
| nodejs | node.js | 6.11.2 |
| nodejs | node.js | 6.11.3 |
| nodejs | node.js | 6.11.4 |
| nodejs | node.js | 8.0.0 |
| nodejs | node.js | 8.1.0 |
| nodejs | node.js | 8.1.1 |
| nodejs | node.js | 8.1.2 |
| nodejs | node.js | 8.1.3 |
| nodejs | node.js | 8.1.4 |
| nodejs | node.js | 8.2.0 |
| nodejs | node.js | 8.2.1 |
| nodejs | node.js | 8.3.0 |
| nodejs | node.js | 8.4.0 |
| nodejs | node.js | 8.5.0 |
| nodejs | node.js | 8.6.0 |
| nodejs | node.js | 8.7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References