« List of all CVEs

CVE-2015-8027

Published: 1/2/2016 Last updated: 8/6/2024 Reserved: 10/29/2015

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-npm

Products affected (1)

Product Vendor Version
n/a n/a 6.7.0.3

References (14)