CVE-2018-12122

Published: Nov 28, 2018Modified: Dec 13, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

Affected (9)

Products: Nodejs: Node.js · Suse: Suse Enterprise Storage, Suse Linux Enterprise Server, Suse Openstack Cloud

Nodejs

1 product

Node.js

Suse

3 products

Suse Enterprise Storage

Suse Linux Enterprise Server

Suse Openstack Cloud

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Nodejs Node.js	From 11.0.0 to 11.3.0
Nodejs Node.js	From 10.0.0 to 10.14.0
Nodejs Node.js	From 6.0.0 to 6.15.1
Nodejs Node.js	From 8.0.0 to 8.14.0

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Suse Suse Enterprise Storage	Version 4
Suse Suse Linux Enterprise Server	Version 12
Suse Suse Linux Enterprise Server	Version 15
Suse Suse Openstack Cloud	Version 7
Suse Suse Openstack Cloud	Version 8