Логотип exploitDog
bind:"BDU:2025-02664" OR bind:"CVE-2025-23085"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2025-02664" OR bind:"CVE-2025-23085"

Количество 19

Количество 19

fstec логотип

BDU:2025-02664

6 месяцев назад

Уязвимость программной платформы Node.js, связанная с отсутствием освобождения памяти после эффективного срока службы, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2025-23085

6 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2025-23085

7 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-23085

6 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2025-23085

6 месяцев назад

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-23085

6 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socke ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-qv9x-c8c9-rpr8

6 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0234-1

6 месяцев назад

Security update for nodejs18

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0233-1

6 месяцев назад

Security update for nodejs18

EPSS: Низкий
redos логотип

ROS-20250212-15

6 месяцев назад

Множественные уязвимости nodejs

CVSS3: 7.7
EPSS: Низкий
oracle-oval логотип

ELSA-2025-1582

6 месяцев назад

ELSA-2025-1582: nodejs:18 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1446

6 месяцев назад

ELSA-2025-1446: nodejs:18 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0284-1

6 месяцев назад

Security update for nodejs22

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0237-1

6 месяцев назад

Security update for nodejs20

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0232-1

6 месяцев назад

Security update for nodejs20

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1613

6 месяцев назад

ELSA-2025-1613: nodejs:22 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1611

6 месяцев назад

ELSA-2025-1611: nodejs:22 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1443

6 месяцев назад

ELSA-2025-1443: nodejs:20 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1351

6 месяцев назад

ELSA-2025-1351: nodejs:20 security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2025-02664

Уязвимость программной платформы Node.js, связанная с отсутствием освобождения памяти после эффективного срока службы, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
0%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
6 месяцев назад
msrc логотип
CVSS3: 5.3
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socke ...

CVSS3: 5.3
0%
Низкий
6 месяцев назад
github логотип
GHSA-qv9x-c8c9-rpr8

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0234-1

Security update for nodejs18

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0233-1

Security update for nodejs18

6 месяцев назад
redos логотип
ROS-20250212-15

Множественные уязвимости nodejs

CVSS3: 7.7
6 месяцев назад
oracle-oval логотип
ELSA-2025-1582

ELSA-2025-1582: nodejs:18 security update (MODERATE)

6 месяцев назад
oracle-oval логотип
ELSA-2025-1446

ELSA-2025-1446: nodejs:18 security update (MODERATE)

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0284-1

Security update for nodejs22

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0237-1

Security update for nodejs20

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0232-1

Security update for nodejs20

6 месяцев назад
oracle-oval логотип
ELSA-2025-1613

ELSA-2025-1613: nodejs:22 security update (IMPORTANT)

6 месяцев назад
oracle-oval логотип
ELSA-2025-1611

ELSA-2025-1611: nodejs:22 security update (IMPORTANT)

6 месяцев назад
oracle-oval логотип
ELSA-2025-1443

ELSA-2025-1443: nodejs:20 security update (IMPORTANT)

6 месяцев назад
oracle-oval логотип
ELSA-2025-1351

ELSA-2025-1351: nodejs:20 security update (IMPORTANT)

6 месяцев назад

Уязвимостей на страницу