Lucene search
Redhat.comRH:CVE-2018-12122HistoryDec 28, 2019 - 10:04 a.m.
CVE-2018-12122
2019-12-2810:04:03
redhat.com
access.redhat.com
14
EPSS
0.006
Percentile
78.1%
It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.
Mitigation
The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.
Related
ubuntucve
ubuntucve
CVE-2018-12122
2018-11-28 00:00:00
attackerkb
attackerkb
CVE-2018-12122
2018-11-28 00:00:00
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
veracode
veracode
Denial Of Service (DoS)
2018-11-30 05:44:46
nvd
nvd
CVE-2018-12122
2018-11-28 17:29:00
cbl_mariner
cbl_mariner
CVE-2018-12122 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
cvelist
cvelist
CVE-2018-12122
2018-11-28 17:00:00
cve
cve
CVE-2018-12122
2018-11-28 17:29:00
osv
osv
CVE-2018-12122
2018-11-28 17:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
alpinelinux
alpinelinux
CVE-2018-12122
2018-11-28 17:29:00
hackerone
hackerone
Node.js: Fix for CVE-2018-12122 can be bypassed via keep-alive requests
2018-12-01 10:03:22
debiancve
debiancve
CVE-2018-12122
2018-11-28 17:29:00
redhatcve
redhatcve
CVE-2019-5737
2020-03-01 07:37:24
ibm
ibm
openvas
openvas
Node.js Multiple Vulnerabilities (Nov 2018) - Mac OS X
2018-11-29 00:00:00
Node.js Multiple Vulnerabilities (Nov 2018) - Windows
2018-11-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0118-1)
2021-06-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.14.1-alt1
2018-11-30 00:00:00
f5
f5
nessus
nessus
F5 Networks BIG-IP : Node.js vulnerabilities (K000137090)
2023-10-02 00:00:00
Photon OS 2.0: Nodejs PHSA-2019-2.0-0190
2024-07-22 00:00:00
SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:0118-1)
2019-01-22 00:00:00
nodejsblog
nodejsblog
February 2019 Security Releases
2019-02-28 00:00:00
November 2018 Security Releases
2018-11-28 00:00:00
suse
suse
Security update for nodejs8 (important)
2019-01-28 00:00:00
Security update for nodejs4 (important)
2019-01-25 00:00:00
Security update for nodejs6 (important)
2019-02-22 00:00:00
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
(RHSA-2019:2939) Important: rh-nodejs10-nodejs security update
2019-09-30 23:10:11
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
photon
photon
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00