CVE-2018-7164
🟡 Monitoruj
Błąd w Node.js powoduje wzrost zużycia pamięci, co może prowadzić do odmowy usługi.
CVSS
7.5
EPSS
6.4%
Exploit
none
Vendor
nodejs
Opis źródłowy (NVD)
Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.
dos
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 6.4% |
| Opublikowano (NVD) | 2018-06-13 16:29:01 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-08 22:16:48 UTC |
Referencje
- http://www.securityfocus.com/bid/104463 ([email protected]) [Third Party Advisory, VDB Entry]
- https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/ ([email protected]) [Vendor Advisory]
- https://security.gentoo.org/glsa/202003-48 ([email protected]) [Third Party Advisory]