Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

  • Published: Oct 30, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-14919
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
nodejs / node.js 6.11.1 6.11.1.x
nodejs / node.js 8.1.1 8.1.1.x
nodejs / node.js 8.1.3 8.1.3.x
nodejs / node.js 6.10.3 6.10.3.x
nodejs / node.js 8.0.0 8.0.0.x
nodejs / node.js 4.8.3 4.8.3.x
nodejs / node.js 8.1.0 8.1.0.x
nodejs / node.js 8.1.2 8.1.2.x
nodejs / node.js 4.8.2 4.8.2.x
nodejs / node.js 6.11.0 6.11.0.x
nodejs / node.js 6.10.2 6.10.2.x
nodejs / node.js 8.5.0 8.5.0.x
nodejs / node.js 4.8.4 4.8.4.x
nodejs / node.js 6.11.2 6.11.2.x
nodejs / node.js 6.11.3 6.11.3.x
nodejs / node.js 6.11.4 6.11.4.x
nodejs / node.js 8.1.4 8.1.4.x
nodejs / node.js 8.2.0 8.2.0.x
nodejs / node.js 8.2.1 8.2.1.x
nodejs / node.js 8.3.0 8.3.0.x
nodejs / node.js 8.4.0 8.4.0.x
nodejs / node.js 8.6.0 8.6.0.x
nodejs / node.js 8.7.0 8.7.0.x