vulnerability

Alpine Linux: CVE-2016-2086: nodejs Security issues

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:N/AC:L/Au:N/C:N/I:P/A:N)	2016-04-07	2017-08-30	2017-10-30

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

2016-04-07

Added

2017-08-30

Modified

2017-10-30

Description

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.

Solution

alpine-linux-upgrade-nodejs

References

ALPINE-5154
ALPINE-5155
ALPINE-5156
ALPINE-5157
BID-83282
CVE-2016-2086
https://attackerkb.com/topics/CVE-2016-2086

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today