Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jul 25, 2017 |
| Suse | — | Upgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade mozilla-nspr-32bitUpgrade firefox-libharfbuzz0Upgrade libfreebl3Upgrade npm4Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-thaiUpgrade nodejs4Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-translations-otherUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-toolsUpgrade mozilla-nspr-develUpgrade nodejs-commonUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-32bitUpgrade nodejs4-docsUpgrade firefox-gtk3-branding-upstreamUpgrade npm6Upgrade firefox-glib2-langUpgrade mozilla-nssUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-multipressUpgrade nodejs6-docsUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-develUpgrade mozillafirefoxUpgrade libfirefox-gobject-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-toolsUpgrade nodejs8Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gio-2_0-0Upgrade nodejs4-develUpgrade nodejs6-develUpgrade firefox-libffi4Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-glib2-toolsUpgrade firefox-gio-branding-upstreamUpgrade nodejs6Upgrade firefox-libffi7Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-branding-sledUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo2Upgrade libfirefox-gthread-2_0-0Upgrade npm8Upgrade firefox-gtk3-dataUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs8-docsUpgrade firefox-libcairo-gobject2Upgrade libfreebl3-32bitUpgrade firefox-gtk3-langUpgrade nodejs8-develUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-lang | Aug 17, 2017 | Jul 25, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub