Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Oct 30, 2017 |
| Freebsd | — | Upgrade node4Upgrade nodeUpgrade node6 | Oct 26, 2017 | Oct 25, 2017 |
| Suse | — | Upgrade nodejs6Upgrade firefox-gtk3-langUpgrade nodejs4-docsUpgrade firefox-libharfbuzz0Upgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade libsoftokn3-32bitUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nssUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-dataUpgrade firefox-libgtk-3-0Upgrade npm6Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade nodejs4Upgrade firefox-atk-langUpgrade MozillaFirefox-translations-commonUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nspr-develUpgrade npm8Upgrade firefox-gio-branding-upstreamUpgrade nodejs6-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-toolsUpgrade nodejs6-docsUpgrade nodejs8-docsUpgrade firefox-glib2-langUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade npm4Upgrade mozilla-nsprUpgrade libfirefox-glib-2_0-0Upgrade nodejs4-develUpgrade firefox-libcairo2Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libatk-1_0-0Upgrade nodejs8Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8-develUpgrade mozilla-nss-develUpgrade libfreebl3Upgrade mozilla-nss-certsUpgrade MozillaFirefox-translations-otherUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libpango-1_0-0Upgrade libsoftokn3 | Jan 5, 2018 | Oct 17, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub