CVE-2018-12122
high · 7.5Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
7.5
CVSS
41.3%
EPSS (exploit prob.)
99th
EPSS percentile
2018-11-28
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| nodejs | node.js | >= 6.0.0, < 6.15.1 |
| nodejs | node.js | >= 8.0.0, < 8.14.0 |
| nodejs | node.js | >= 10.0.0, < 10.14.0 |
| nodejs | node.js | >= 11.0.0, < 11.3.0 |
| suse | suse_enterprise_storage | 4 |
| suse | suse_linux_enterprise_server | 12 |
| suse | suse_linux_enterprise_server | 15 |
| suse | suse_openstack_cloud | 7 |
| suse | suse_openstack_cloud | 8 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/106043
- https://access.redhat.com/errata/RHSA-2019:1821
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
- https://security.gentoo.org/glsa/202003-48
- http://www.securityfocus.com/bid/106043
- https://access.redhat.com/errata/RHSA-2019:1821
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
- https://security.gentoo.org/glsa/202003-48
- https://security.netapp.com/advisory/ntap-20241213-0009/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-12122