Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 30, 2017 | Apr 7, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Apr 7, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 23, 2016 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Oct 30, 2017 | Apr 7, 2016 |
| Suse | — | Upgrade firefox-gtk3-langUpgrade libsoftokn3Upgrade nodejs8-docsUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-translations-otherUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-toolsUpgrade mozillafirefox-translations-commonUpgrade firefox-libcairo2Upgrade firefox-gtk3-toolsUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-ximUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade mozilla-nss-develUpgrade firefox-atk-langUpgrade nodejs8-develUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libpango-1_0-0Upgrade libfirefox-gobject-2_0-0Upgrade nodejs8Upgrade firefox-gtk3-dataUpgrade firefox-libffi4Upgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade npm8Upgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozillafirefoxUpgrade mozilla-nsprUpgrade firefox-libffi7Upgrade libfreebl3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nssUpgrade mozillafirefox-branding-sledUpgrade libfirefox-gthread-2_0-0Upgrade libfreebl3Upgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0 | Apr 7, 2016 | Apr 7, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub