CVE-2018-12122

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

Published: Nov 28, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-12122
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-400

Affected Software
References

Software	From	Fixed in
nodejs / node.js	11.0.0	11.3.0
nodejs / node.js	10.0.0	10.14.0
nodejs / node.js	8.0.0	8.14.0
nodejs / node.js	6.0.0	6.15.1
suse / suse_linux_enterprise_server	12	12.x
suse / suse_enterprise_storage	4	4.x
suse / suse_openstack_cloud	7	7.x
suse / suse_openstack_cloud	8	8.x
suse / suse_linux_enterprise_server	15	15.x

http://www.securityfocus.com/bid/106043
https://access.redhat.com/errata/RHSA-2019:1821
https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
https://security.gentoo.org/glsa/202003-48
https://security.netapp.com/advisory/ntap-20241213-0009/

Vulnerability Database

CVE-2018-12122

Deep Security Visibility Without the Complexity