Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jul 25, 2017 |
| Suse | — | Upgrade libfirefox-gio-2_0-0Upgrade firefox-libffi7Upgrade firefox-gtk3-immodule-amharicUpgrade mozillafirefoxUpgrade firefox-libffi4Upgrade firefox-libcairo2Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gdk-pixbuf-langUpgrade firefox-glib2-toolsUpgrade libfreebl3-32bitUpgrade nodejs6Upgrade mozilla-nss-certs-32bitUpgrade npm8Upgrade firefox-libcairo-gobject2Upgrade nodejs6-develUpgrade firefox-gio-branding-upstreamUpgrade firefox-libpango-1_0-0Upgrade nodejs8-develUpgrade firefox-gtk3-immodule-ximUpgrade libsoftokn3-32bitUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-query-loadersUpgrade nodejs8-docsUpgrade mozillafirefox-branding-sledUpgrade firefox-libatk-1_0-0Upgrade libfirefox-gobject-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade nodejs8Upgrade nodejs4-develUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade npm4Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs4-docsUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nssUpgrade firefox-libgtk-3-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certsUpgrade mozillafirefox-translations-commonUpgrade mozillafirefox-translations-otherUpgrade libfreebl3Upgrade firefox-libharfbuzz0Upgrade firefox-glib2-langUpgrade nodejs4Upgrade libsoftokn3Upgrade npm6Upgrade nodejs6-docsUpgrade mozilla-nspr-develUpgrade mozilla-nsprUpgrade nodejs-commonUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-32bit | Aug 17, 2017 | Jul 25, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub