← Back

CVE-2015-8027

nvd nist
Published: Jan 2, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.

Affected (14)

Products: Nodejs: Node.js
Nodejs
1 product
Node.js
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Nodejs
Node.js
Version 0.12.0
Node.js
Version 0.12.1
Node.js
Version 0.12.2
Node.js
Version 0.12.3
Node.js
Version 0.12.4
Node.js
Version 0.12.5
Node.js
Version 0.12.6
Node.js
Version 0.12.7
Node.js
Version 0.12.8
Node.js
Version 4.2.0
Node.js
Version 4.2.1
Node.js
Version 4.2.2
Node.js
Version 5.0.0
Node.js
Version 5.1.0

Related CWEs

CWE-17
CWE-17

References (14)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.