Name: CVE-2019-15605: Inconsistent Interpretation of HTTP Requests
Published: 2020-02-07T00:00:00.000Z
Keywords: CVE, CVE-2019-15605, CWE-444, CVSS 9.8, EPSS 0.57132

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	View advisory ↗View advisory ↗View advisory ↗	alma-upgrade-nodejs-nodemonalma-upgrade-nodejs-packaging	May 4, 2022	Feb 7, 2020
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-nodejsalpine-linux-upgrade-nodejs-current	Aug 22, 2024	Feb 7, 2020
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-http-parseramazon-linux-ami-2-upgrade-http-parser-debuginfoamazon-linux-ami-2-upgrade-http-parser-devel	May 8, 2020	Feb 7, 2020
Amazon_linux	—	amazon-linux-upgrade-http-parser	Apr 24, 2020	Feb 7, 2020
Centos_linux	—	centos-upgrade-http-parsercentos-upgrade-http-parser-debuginfocentos-upgrade-http-parser-debugsourcecentos-upgrade-http-parser-develcentos-upgrade-nodejscentos-upgrade-nodejs-debuginfocentos-upgrade-nodejs-debugsourcecentos-upgrade-nodejs-develcentos-upgrade-nodejs-devel-debuginfocentos-upgrade-nodejs-docscentos-upgrade-nodejs-nodemoncentos-upgrade-nodejs-packagingcentos-upgrade-npm	Feb 26, 2020	Feb 7, 2020
Debian	View advisory ↗	debian-upgrade-http-parserdebian-upgrade-nodejs	May 1, 2020	Feb 7, 2020
Freebsd	View advisory ↗	freebsd-upgrade-package-nodefreebsd-upgrade-package-node12freebsd-upgrade-package-node10	Mar 10, 2020	Mar 9, 2020
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-net-libs-nodejs	Mar 23, 2020	Feb 7, 2020
Oracle Solaris	View advisory ↗	oracle-solaris-11-4-upgrade-runtime-nodejs-10-19-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-10-10-19-0-11-4-21-0-1-69-0	Jan 19, 2021	Feb 7, 2020
Oracle_linux	—	oracle-linux-upgrade-http-parseroracle-linux-upgrade-http-parser-develoracle-linux-upgrade-nodejsoracle-linux-upgrade-nodejs-develoracle-linux-upgrade-nodejs-docsoracle-linux-upgrade-nodejs-nodemonoracle-linux-upgrade-nodejs-packagingoracle-linux-upgrade-npm	Mar 2, 2020	Feb 7, 2020
Redhat_linux	View advisory ↗	redhat-upgrade-http-parserredhat-upgrade-http-parser-debuginforedhat-upgrade-http-parser-debugsourceredhat-upgrade-http-parser-develredhat-upgrade-nodejsredhat-upgrade-nodejs-debuginforedhat-upgrade-nodejs-debugsourceredhat-upgrade-nodejs-develredhat-upgrade-nodejs-devel-debuginforedhat-upgrade-nodejs-docsredhat-upgrade-nodejs-nodemonredhat-upgrade-nodejs-packagingredhat-upgrade-npm	Feb 26, 2020	Feb 7, 2020
Suse	—	suse-upgrade-nodejs10suse-upgrade-nodejs10-develsuse-upgrade-nodejs10-docssuse-upgrade-nodejs12suse-upgrade-nodejs12-develsuse-upgrade-nodejs12-docssuse-upgrade-nodejs6suse-upgrade-nodejs6-develsuse-upgrade-nodejs6-docssuse-upgrade-nodejs8suse-upgrade-nodejs8-develsuse-upgrade-nodejs8-docssuse-upgrade-npm10suse-upgrade-npm12suse-upgrade-npm6suse-upgrade-npm8	Mar 3, 2020	Feb 7, 2020
Ubuntu	View advisory ↗	ubuntu-pro-upgrade-nodejsubuntu-pro-upgrade-nodejs-devubuntu-pro-upgrade-nodejs-legacyubuntu-upgrade-libnode-devubuntu-upgrade-libnode64ubuntu-upgrade-nodejs	Sep 20, 2023	Feb 7, 2020
Vmware Photon_os	View advisory ↗	vmware-photon_os_update_tdnf	Jan 20, 2025	Feb 7, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub