Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ Patch, Vendor Advisory
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · nodejs, suseNVD modified 2026-10-08 22:16
Affected (CPE criteria) 7
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*cpe:2.3:a:suse:suse_enterprise_storage:4:*:*:*:*:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*cpe:2.3:o:suse:suse_openstack_cloud:7:*:*:*:*:*:*:*cpe:2.3:o:suse:suse_openstack_cloud:8:*:*:*:*:*:*:*
References 9
- http://www.securityfocus.com/bid/106043 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:1821 Third Party Advisory
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202003-48 Third Party Advisory
- http://www.securityfocus.com/bid/106043 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:1821 Third Party Advisory
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202003-48 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20241213-0009/