CVE-2018-12122

Published: 11/28/2018 Last updated: 12/13/2024 Reserved: 6/11/2018

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

CNA assigner: nodejs (386269d4-a6c6-4eaa-bf8e-bc0b0d010558) Requested by: n/a

Opam packages affected (1)

conf-npm

Products affected (1)

Product	Vendor	Version
Node.js	The Node.js Project	n/a

References (9)

https://security.gentoo.org/glsa/202003-48
https://security.netapp.com/advisory/ntap-20241213-0009/
https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
http://www.securityfocus.com/bid/106043
https://access.redhat.com/errata/RHSA-2019:1821
https://security.gentoo.org/glsa/202003-48
https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
http://www.securityfocus.com/bid/106043
https://access.redhat.com/errata/RHSA-2019:1821