Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Nov 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade http-parserUpgrade http-parser-develUpgrade http-parser-debuginfo | Apr 27, 2020 | Nov 28, 2018 |
| Amazon_linux | — | Upgrade http-parser | Apr 24, 2020 | Nov 28, 2018 |
| Centos_linux | — | Upgrade http-parser-debugsourceUpgrade http-parserUpgrade http-parser-debuginfoUpgrade http-parser-devel | Aug 28, 2019 | Nov 28, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Nov 28, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 3, 2023 |
| Freebsd | — | Upgrade node6Upgrade nodeUpgrade node8Upgrade node10 | Dec 10, 2018 | Dec 10, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade http-parser | Jun 17, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 28, 2018 |
| Oracle_linux | — | Upgrade http-parser-develUpgrade http-parser | Jul 21, 2020 | Nov 27, 2018 |
| Redhat_linux | — | Upgrade http-parser-develUpgrade http-parserUpgrade http-parser-debuginfoUpgrade http-parser-debugsource | Aug 7, 2019 | Nov 28, 2018 |
| Suse | — | Upgrade firefox-libffi7Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade firefox-glib2-langUpgrade npm6Upgrade nodejs4-docsUpgrade firefox-gtk3-dataUpgrade libfirefox-gobject-2_0-0Upgrade nodejs10-docsUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade nodejs4Upgrade nodejs10-develUpgrade firefox-gio-branding-upstreamUpgrade npm10Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade nodejs8-docsUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade MozillaFirefox-branding-SLEDUpgrade nodejs6-develUpgrade firefox-libffi4Upgrade mozilla-nss-certs-32bitUpgrade firefox-atk-langUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3Upgrade nodejs10Upgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-glib-2_0-0Upgrade nodejs4-develUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gdk-pixbuf-query-loadersUpgrade nodejs6Upgrade firefox-glib2-toolsUpgrade mozilla-nss-develUpgrade firefox-libcairo-gobject2Upgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs8Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade npm4Upgrade firefox-libcairo2Upgrade firefox-libpango-1_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade npm8Upgrade mozilla-nss-certsUpgrade firefox-libgtk-3-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-toolsUpgrade nodejs8-develUpgrade nodejs6-docs | Jan 31, 2019 | Nov 28, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub