Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Nov 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade http-parser-debuginfoUpgrade http-parser-develUpgrade http-parser | Apr 27, 2020 | Nov 28, 2018 |
| Amazon_linux | — | Upgrade http-parser | Apr 24, 2020 | Nov 28, 2018 |
| Centos_linux | — | Upgrade http-parser-develUpgrade http-parser-debuginfoUpgrade http-parser-debugsourceUpgrade http-parser | Aug 28, 2019 | Nov 28, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Nov 28, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 3, 2023 |
| Freebsd | — | Upgrade node10Upgrade node8Upgrade nodeUpgrade node6 | Dec 10, 2018 | Dec 10, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade http-parser | Jun 17, 2020 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade http-parser | Nov 19, 2019 | Nov 28, 2018 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 28, 2018 |
| Oracle_linux | — | Upgrade http-parserUpgrade http-parser-devel | Jul 21, 2020 | Nov 27, 2018 |
| Redhat_linux | — | Upgrade http-parser-develUpgrade http-parserUpgrade http-parser-debugsourceUpgrade http-parser-debuginfo | Aug 7, 2019 | Nov 28, 2018 |
| Suse | — | Upgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-vietnameseUpgrade libsoftokn3-32bitUpgrade firefox-libharfbuzz0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-dataUpgrade mozilla-nsprUpgrade firefox-libffi7Upgrade nodejs4Upgrade nodejs10-docsUpgrade MozillaFirefoxUpgrade npm6Upgrade nodejs8-docsUpgrade libfirefox-gobject-2_0-0Upgrade nodejs4-docsUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3Upgrade nodejs10-develUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nspr-develUpgrade npm10Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade nodejs8Upgrade libfirefox-gio-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade npm8Upgrade nodejs10Upgrade firefox-atk-langUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-ximUpgrade nodejs6-docsUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nssUpgrade nodejs6-develUpgrade libsoftokn3Upgrade firefox-libgtk-3-0Upgrade mozilla-nss-certsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libcairo2Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade nodejs4-develUpgrade libfreebl3-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade npm4Upgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade mozilla-nss-develUpgrade firefox-glib2-toolsUpgrade firefox-libpango-1_0-0Upgrade nodejs8-develUpgrade firefox-gtk3-immodule-amharicUpgrade nodejs6 | Jan 31, 2019 | Nov 28, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 28, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub