← Back

CVE-2016-2086

nvd nist
Published: Apr 7, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.

Affected (74)

1 product
Node.js
1 product
Fedora
Configuration A
72 vulnerable
Vulnerable SoftwareAffected Versions
Nodejs
Version 0.10.0
Version 0.10.10
Version 0.10.11
Version 0.10.12
Version 0.10.13
Version 0.10.14
Version 0.10.15
Version 0.10.16-isaacs-manual
Version 0.10.16
Version 0.10.17
Version 0.10.18
Version 0.10.19
Version 0.10.1
Version 0.10.20
Version 0.10.21
Version 0.10.22
Version 0.10.23
Version 0.10.24
Version 0.10.25
Version 0.10.26
Version 0.10.27
Version 0.10.28
Version 0.10.29
Version 0.10.2
Version 0.10.30
Version 0.10.31
Version 0.10.32
Version 0.10.33
Version 0.10.34
Version 0.10.35
Version 0.10.36
Version 0.10.37
Version 0.10.38
Version 0.10.39
Version 0.10.3
Version 0.10.40
Version 0.10.41
Version 0.10.4
Version 0.10.5
Version 0.10.6
Version 0.10.7
Version 0.10.8
Version 0.10.9
Version 0.12.0
Version 0.12.1
Version 0.12.2
Version 0.12.3
Version 0.12.4
Version 0.12.5
Version 0.12.6
Version 0.12.7
Version 0.12.8
Version 0.12.9
Version 4.0.0
Version 4.1.0
Version 4.1.1
Version 4.1.2
Version 4.2.0
Version 4.2.1
Version 4.2.2
Version 4.2.3
Version 4.2.4
Version 4.2.5
Version 4.2.6
Version 5.0.0
Version 5.1.0
Version 5.1.1
Version 5.2.0
Version 5.3.0
Version 5.4.0
Version 5.4.1
Version 5.5.0
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 22
Version 23

Timeline

No history available yet.