The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Nov 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade http-parserUpgrade http-parser-develUpgrade http-parser-debuginfo | Apr 27, 2020 | Nov 28, 2018 |
| Amazon_linux | — | Upgrade http-parser | Apr 24, 2020 | Nov 28, 2018 |
| Centos_linux | — | Upgrade http-parser-develUpgrade http-parser-debugsourceUpgrade http-parser-debuginfoUpgrade http-parser | Aug 28, 2019 | Nov 28, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Nov 28, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 3, 2023 |
| Freebsd | — | Upgrade node10Upgrade node6Upgrade node8Upgrade node | Dec 10, 2018 | Dec 10, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade http-parser | Jun 17, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 28, 2018 |
| Oracle_linux | — | Upgrade http-parser-develUpgrade http-parser | Jul 21, 2020 | Nov 27, 2018 |
| Redhat_linux | — | Upgrade http-parser-develUpgrade http-parser-debugsourceUpgrade http-parser-debuginfoUpgrade http-parser | Aug 7, 2019 | Nov 28, 2018 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-ximUpgrade libsoftokn3Upgrade MozillaFirefox-translations-otherUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-toolsUpgrade nodejs4-develUpgrade libfreebl3-32bitUpgrade mozilla-nss-certs-32bitUpgrade nodejs10Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade npm4Upgrade firefox-gtk3-langUpgrade mozilla-nss-develUpgrade firefox-libcairo-gobject2Upgrade nodejs8Upgrade nodejs6-develUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libcairo2Upgrade nodejs6Upgrade firefox-glib2-toolsUpgrade npm8Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certsUpgrade firefox-libffi4Upgrade nodejs6-docsUpgrade mozilla-nssUpgrade libfirefox-gio-2_0-0Upgrade firefox-atk-langUpgrade firefox-gtk3-toolsUpgrade nodejs8-develUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-multipressUpgrade nodejs10-develUpgrade nodejs10-docsUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs4-docsUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade nodejs8-docsUpgrade libfirefox-gthread-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gio-branding-upstreamUpgrade npm10Upgrade npm6Upgrade firefox-gtk3-dataUpgrade nodejs4Upgrade libsoftokn3-32bitUpgrade firefox-libffi7 | Jan 31, 2019 | Nov 28, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub