ghsa-qf9f-226q-7q59
Vulnerability from github
Published
2022-05-14 03:07
Modified
2025-04-11 04:15
Details
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
{
"affected": [],
"aliases": [
"CVE-2013-4450"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2013-10-21T17:55:00Z",
"severity": "MODERATE"
},
"details": "The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.",
"id": "GHSA-qf9f-226q-7q59",
"modified": "2025-04-11T04:15:19Z",
"published": "2022-05-14T03:07:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4450"
},
{
"type": "WEB",
"url": "https://github.com/joyent/node/issues/6214"
},
{
"type": "WEB",
"url": "https://github.com/rapid7/metasploit-framework/pull/2548"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/nodejs/NEbweYB0ei0"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#%21topic/nodejs/NEbweYB0ei0"
},
{
"type": "WEB",
"url": "https://kb.juniper.net/JSA10783"
},
{
"type": "WEB",
"url": "http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable"
},
{
"type": "WEB",
"url": "http://blog.nodejs.org/2013/10/18/node-v0-8-26-maintenance"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00051.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2013-1842.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2013/10/20/1"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/63229"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.