All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Jun 13, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jun 13, 2018 |
| Freebsd | — | Upgrade node8Upgrade node6Upgrade node | Jun 16, 2018 | Jun 15, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Jun 13, 2018 |
| Suse | — | Upgrade firefox-libgtk-3-0Upgrade nodejs8-develUpgrade mozilla-nsprUpgrade nodejs10-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-32bitUpgrade mozilla-nspr-develUpgrade firefox-libharfbuzz0Upgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gobject-2_0-0Upgrade MozillaFirefoxUpgrade firefox-gtk3-dataUpgrade libfirefox-gthread-2_0-0Upgrade npm10Upgrade nodejs8Upgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefox-translations-commonUpgrade nodejs10-docsUpgrade nodejs8-docsUpgrade firefox-libffi7Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-toolsUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade firefox-libatk-1_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-develUpgrade firefox-gdk-pixbuf-query-loadersUpgrade npm8Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-langUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nssUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libcairo-gobject2Upgrade libsoftokn3Upgrade libfreebl3-32bitUpgrade libfreebl3Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libffi4Upgrade nodejs10Upgrade mozilla-nss-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-atk-langUpgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-lang | Jul 17, 2018 | Jun 13, 2018 |
| Ubuntu | — | Upgrade nodejs | Nov 19, 2024 | Jun 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub