Логотип exploitDog
bind:"CVE-2025-23085"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2025-23085"

Количество 19

Количество 19

ubuntu логотип

CVE-2025-23085

4 месяца назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2025-23085

5 месяцев назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-23085

4 месяца назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2025-23085

4 месяца назад

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-23085

4 месяца назад

A memory leak could occur when a remote peer abruptly closes the socke ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-qv9x-c8c9-rpr8

4 месяца назад

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2025-02664

4 месяца назад

Уязвимость программной платформы Node.js, связанная с отсутствием освобождения памяти после эффективного срока службы, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0234-1

5 месяцев назад

Security update for nodejs18

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0233-1

5 месяцев назад

Security update for nodejs18

EPSS: Низкий
redos логотип

ROS-20250212-15

4 месяца назад

Множественные уязвимости nodejs

CVSS3: 7.7
EPSS: Низкий
oracle-oval логотип

ELSA-2025-1582

4 месяца назад

ELSA-2025-1582: nodejs:18 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1446

4 месяца назад

ELSA-2025-1446: nodejs:18 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0284-1

5 месяцев назад

Security update for nodejs22

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0237-1

5 месяцев назад

Security update for nodejs20

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0232-1

5 месяцев назад

Security update for nodejs20

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1613

4 месяца назад

ELSA-2025-1613: nodejs:22 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1611

4 месяца назад

ELSA-2025-1611: nodejs:22 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1443

4 месяца назад

ELSA-2025-1443: nodejs:20 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-1351

4 месяца назад

ELSA-2025-1351: nodejs:20 security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
4 месяца назад
redhat логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
4 месяца назад
msrc логотип
CVSS3: 5.3
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-23085

A memory leak could occur when a remote peer abruptly closes the socke ...

CVSS3: 5.3
0%
Низкий
4 месяца назад
github логотип
GHSA-qv9x-c8c9-rpr8

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

CVSS3: 5.3
0%
Низкий
4 месяца назад
fstec логотип
BDU:2025-02664

Уязвимость программной платформы Node.js, связанная с отсутствием освобождения памяти после эффективного срока службы, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0234-1

Security update for nodejs18

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0233-1

Security update for nodejs18

5 месяцев назад
redos логотип
ROS-20250212-15

Множественные уязвимости nodejs

CVSS3: 7.7
4 месяца назад
oracle-oval логотип
ELSA-2025-1582

ELSA-2025-1582: nodejs:18 security update (MODERATE)

4 месяца назад
oracle-oval логотип
ELSA-2025-1446

ELSA-2025-1446: nodejs:18 security update (MODERATE)

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0284-1

Security update for nodejs22

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0237-1

Security update for nodejs20

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0232-1

Security update for nodejs20

5 месяцев назад
oracle-oval логотип
ELSA-2025-1613

ELSA-2025-1613: nodejs:22 security update (IMPORTANT)

4 месяца назад
oracle-oval логотип
ELSA-2025-1611

ELSA-2025-1611: nodejs:22 security update (IMPORTANT)

4 месяца назад
oracle-oval логотип
ELSA-2025-1443

ELSA-2025-1443: nodejs:20 security update (IMPORTANT)

4 месяца назад
oracle-oval логотип
ELSA-2025-1351

ELSA-2025-1351: nodejs:20 security update (IMPORTANT)

4 месяца назад

Уязвимостей на страницу