PT-2018-17923
CVE-2018-7162
·
Published
2018-06-13
·
Updated
2026-10-08
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Node.js versions 9.x through 10.x
Description
The issue allows an attacker to cause a denial of service (DoS) by crashing a node process that provides an http server supporting TLS server. This can be accomplished by sending duplicate or unexpected messages during the handshake.
Recommendations
For Node.js versions 9.x through 10.x, update the TLS implementation to address the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾