Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jul 25, 2017 |
| Suse | — | Upgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade npm8Upgrade MozillaFirefoxUpgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade firefox-libcairo2Upgrade firefox-glib2-toolsUpgrade nodejs8-docsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-dataUpgrade nodejs6Upgrade firefox-gtk3-immodule-ximUpgrade nodejs8-develUpgrade nodejs6-develUpgrade nodejs4-develUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade libsoftokn3-32bitUpgrade nodejs8Upgrade firefox-atk-langUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-toolsUpgrade libfreebl3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs4-docsUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nssUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade nodejs-commonUpgrade libfreebl3Upgrade firefox-glib2-langUpgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-multipressUpgrade nodejs6-docsUpgrade mozilla-nss-toolsUpgrade npm4Upgrade MozillaFirefox-translations-otherUpgrade nodejs4Upgrade firefox-gtk3-immodule-thaiUpgrade npm6Upgrade firefox-libharfbuzz0 | Aug 17, 2017 | Jul 25, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 25, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub