Логотип exploitDog
bind:CVE-2019-5737
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-5737

Количество 16

Количество 16

ubuntu логотип

CVE-2019-5737

около 6 лет назад

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2019-5737

больше 6 лет назад

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 5.3
EPSS: Средний
nvd логотип

CVE-2019-5737

около 6 лет назад

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
EPSS: Средний
msrc логотип

CVE-2019-5737

около 4 лет назад

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2019-5737

около 6 лет назад

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before ...

CVSS3: 7.5
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2019:1211-1

около 6 лет назад

Security update for nodejs10

EPSS: Средний
suse-cvrf логотип

SUSE-SU-2019:0636-1

больше 6 лет назад

Security update for nodejs10

EPSS: Средний
suse-cvrf логотип

SUSE-SU-2019:0635-1

больше 6 лет назад

Security update for nodejs8

EPSS: Средний
suse-cvrf логотип

SUSE-SU-2019:0627-1

больше 6 лет назад

Security update for nodejs10

EPSS: Средний
github логотип

GHSA-24mv-c2pp-2q4f

около 3 лет назад

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2019:1173-1

около 6 лет назад

Security update for nodejs6

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1076-1

около 6 лет назад

Security update for nodejs4

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0818-1

около 6 лет назад

Security update for nodejs6

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0658-1

около 6 лет назад

Security update for nodejs4

EPSS: Низкий
rocky логотип

RLSA-2019:2925

больше 5 лет назад

Important: nodejs:10 security update

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:14246-1

больше 5 лет назад

Security update for Mozilla Firefox

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
29%
Средний
около 6 лет назад
redhat логотип
CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 5.3
29%
Средний
больше 6 лет назад
nvd логотип
CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
29%
Средний
около 6 лет назад
msrc логотип
CVSS3: 7.5
29%
Средний
около 4 лет назад
debian логотип
CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before ...

CVSS3: 7.5
29%
Средний
около 6 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1211-1

Security update for nodejs10

29%
Средний
около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0636-1

Security update for nodejs10

29%
Средний
больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0635-1

Security update for nodejs8

29%
Средний
больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0627-1

Security update for nodejs10

29%
Средний
больше 6 лет назад
github логотип
GHSA-24mv-c2pp-2q4f

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.

CVSS3: 7.5
29%
Средний
около 3 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1173-1

Security update for nodejs6

около 6 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1076-1

Security update for nodejs4

около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0818-1

Security update for nodejs6

около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0658-1

Security update for nodejs4

около 6 лет назад
rocky логотип
RLSA-2019:2925

Important: nodejs:10 security update

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2019:14246-1

Security update for Mozilla Firefox

больше 5 лет назад

Уязвимостей на страницу