Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 30, 2017 | Apr 7, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Apr 7, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 23, 2016 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Oct 30, 2017 | Apr 7, 2016 |
| Suse | — | Upgrade firefox-libpango-1_0-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libgtk-3-0Upgrade npm8Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gio-branding-upstreamUpgrade libsoftokn3-32bitUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nssUpgrade nodejs8Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade libfreebl3-32bitUpgrade firefox-libffi7Upgrade firefox-gtk3-dataUpgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade libfreebl3Upgrade libfirefox-gio-2_0-0Upgrade firefox-atk-langUpgrade nodejs8-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-toolsUpgrade nodejs8-docsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-langUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-thaiUpgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade firefox-glib2-langUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-32bitUpgrade firefox-libatk-1_0-0Upgrade mozilla-nss-toolsUpgrade firefox-libharfbuzz0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libcairo2Upgrade mozilla-nss-devel | Apr 7, 2016 | Apr 7, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub