Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jul 25, 2017 |
| Suse | — | Upgrade nodejs6Upgrade nodejs8-docsUpgrade firefox-gtk3-toolsUpgrade firefox-libffi7Upgrade firefox-gtk3-langUpgrade nodejs6-develUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-glib-2_0-0Upgrade firefox-libcairo2Upgrade npm8Upgrade firefox-libffi4Upgrade nodejs8Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certs-32bitUpgrade firefox-libpango-1_0-0Upgrade nodejs4-develUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gthread-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade nodejs8-develUpgrade libsoftokn3-32bitUpgrade libfreebl3-32bitUpgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-glib2-toolsUpgrade firefox-atk-langUpgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nsprUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-develUpgrade nodejs-commonUpgrade firefox-glib2-langUpgrade nodejs4Upgrade nodejs4-docsUpgrade MozillaFirefox-branding-SLEDUpgrade npm4Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs6-docsUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nssUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-translations-otherUpgrade firefox-libharfbuzz0Upgrade npm6Upgrade libsoftokn3Upgrade libfreebl3Upgrade mozilla-nspr-32bit | Aug 17, 2017 | Jul 25, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub