Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Nov 28, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Nov 28, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 3, 2023 |
| Freebsd | — | Upgrade node6Upgrade node8Upgrade node10Upgrade node | Dec 10, 2018 | Dec 10, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 28, 2018 |
| Suse | — | Upgrade firefox-gtk3-toolsUpgrade mozilla-nss-toolsUpgrade npm4Upgrade mozilla-nspr-develUpgrade nodejs4-docsUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-develUpgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libharfbuzz0Upgrade npm6Upgrade firefox-libcairo2Upgrade libsoftokn3-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-dataUpgrade libfirefox-gthread-2_0-0Upgrade firefox-glib2-langUpgrade mozilla-nspr-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nssUpgrade nodejs10Upgrade nodejs8-docsUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade nodejs10-develUpgrade firefox-libffi7Upgrade libfirefox-gobject-2_0-0Upgrade nodejs6Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs6-develUpgrade firefox-gio-branding-upstreamUpgrade libfreebl3-32bitUpgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs10-docsUpgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs6-docsUpgrade nodejs4Upgrade nodejs4-develUpgrade nodejs8-develUpgrade nodejs8Upgrade firefox-glib2-toolsUpgrade npm8Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-inuktitutUpgrade npm10Upgrade firefox-libffi4Upgrade libfreebl3 | Jan 31, 2019 | Nov 28, 2018 |
| Ubuntu | — | Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade nodejs-legacy (Ubuntu Pro)Upgrade nodejs (Ubuntu Pro) | Mar 22, 2023 | Nov 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub