p PatchFirst

CVE-2015-8027

CVE-2015-8027

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.

CVSS 7.5 · High · EPSS 5.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nodejs Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.2.3~dfsg-1

    Update to 4.2.3~dfsg-1

  • nodejs Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.2.3~dfsg-1

    Update to 4.2.3~dfsg-1

  • nodejs Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.2.3~dfsg-1

    Update to 4.2.3~dfsg-1

Original sources

Check your server →