All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Jun 13, 2018 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Jun 13, 2018 |
| Freebsd | — | Upgrade node6Upgrade nodeUpgrade node8 | Jun 16, 2018 | Jun 15, 2018 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Jun 13, 2018 |
| Suse | — | Upgrade firefox-gtk3-toolsUpgrade firefox-libpango-1_0-0Upgrade libfirefox-glib-2_0-0Upgrade mozilla-nssUpgrade firefox-libatk-1_0-0Upgrade npm8Upgrade firefox-gdk-pixbuf-langUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gio-2_0-0Upgrade nodejs8-develUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-glib2-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-toolsUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi4Upgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade libfreebl3Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3-32bitUpgrade firefox-atk-langUpgrade MozillaFirefox-translations-otherUpgrade firefox-libcairo2Upgrade libsoftokn3Upgrade nodejs10Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nsprUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-dataUpgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade firefox-libffi7Upgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefoxUpgrade nodejs8-docsUpgrade npm10Upgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-32bitUpgrade nodejs10-develUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefox-translations-commonUpgrade firefox-gio-branding-upstreamUpgrade nodejs8Upgrade libfirefox-gthread-2_0-0Upgrade nodejs10-docsUpgrade libfirefox-gobject-2_0-0 | Jul 17, 2018 | Jun 13, 2018 |
| Ubuntu | — | Upgrade nodejs | Nov 19, 2024 | Jun 13, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub