Lucene search

K
redhatcveRedhat.comRH:CVE-2018-7159
HistoryOct 20, 2019 - 6:35 a.m.

CVE-2018-7159

2019-10-2006:35:28
redhat.com
access.redhat.com
17

EPSS

0.001

Percentile

50.1%

It was found that the http module from Node.js could accept incorrect Content-Length values, containing spaces within the value, in HTTP headers. A specially crafted client could use this flaw to possibly confuse the script, causing unspecified behavior.