PT-2018-17923
CVE-2018-7162
·
تاريخ النشر
2018-06-13
·
تاريخ التحديث
2026-10-08
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Node.js versions 9.x through 10.x
Description
The issue allows an attacker to cause a denial of service (DoS) by crashing a node process that provides an http server supporting TLS server. This can be accomplished by sending duplicate or unexpected messages during the handshake.
Recommendations
For Node.js versions 9.x through 10.x, update the TLS implementation to address the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾