PT-2026-2477

CVE-2025-59465

·

Published

2025-01-01

·

Updated

2026-09-29

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Node.js (affected versions not specified)
Description A flaw exists in the Node.js software platform related to improper handling of exceptional states. Exploitation may allow a remote attacker to cause a denial-of-service condition. Specifically, malformed HTTP/2 HEADERS frames can cause Node.js to crash due to an unhandled TLS error, resulting in an instant process crash and remote denial-of-service. No authentication is required on misconfigured servers.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:1842
ALSA-2026:1843
ALSA-2026:2420
ALSA-2026:2421
ALSA-2026:2422
ALSA-2026:2781
ALSA-2026:2782
ALSA-2026:2783
AZL-75077
BIT-NODE-2025-59465
BIT-NODE-MIN-2025-59465
CLEANSTART-2026-UP28744
MGASA-2026-0009
OESA-2026-1218
OESA-2026-1219
OESA-2026-1220
OESA-2026-1221
OESA-2026-2820
OESA-2026-2821
OPENSUSE-SU-2026:10062-1
OPENSUSE-SU-2026:10074-1
OPENSUSE-SU-2026:11110-1
OPENSUSE-SU-2026:20236-1
RHSA-2026:1842
RHSA-2026:1843
RHSA-2026:2420
RHSA-2026:2421
RHSA-2026:2422
RHSA-2026:2767
RHSA-2026:2768
RHSA-2026:2781
RHSA-2026:2782
RHSA-2026:2783
RHSA-2026:2864
RHSA-2026:2899
RHSA-2026:6402
RHSA-2026:6431
RHSA-2026:7386
RHSA-2026:7387
SUSE-SU-2026:0295-1
SUSE-SU-2026:0301-1
SUSE-SU-2026:0435-1
SUSE-SU-2026:0457-1
SUSE-SU-2026:20436-1
SUSE-SU-2026:4248-1
SUSE-SU-2026:4261-1
SUSE-SU-2026:4355-1
Found an issue in the description? Have something to add? Feel free to write us 👾