Lucene search
Redhat.comRH:CVE-2019-5737HistoryMar 01, 2020 - 7:37 a.m.
CVE-2019-5737
2020-03-0107:37:24
redhat.com
access.redhat.com
14
EPSS
0.013
Percentile
86.4%
It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server’s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.
Mitigation
The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.
Related
nessus
nessus
Photon OS 2.0: Nodejs PHSA-2019-2.0-0190
2024-07-22 00:00:00
Photon OS 1.0: Nodejs PHSA-2019-1.0-0257
2019-12-31 00:00:00
openSUSE Security Update : nodejs10 (openSUSE-2019-1211)
2019-04-17 00:00:00
nodejsblog
nodejsblog
February 2019 Security Releases
2019-02-28 00:00:00
November 2018 Security Releases
2018-11-28 00:00:00
ubuntucve
ubuntucve
CVE-2018-12122
2018-11-28 00:00:00
CVE-2019-5737
2019-03-28 00:00:00
redhatcve
redhatcve
CVE-2018-12122
2019-12-28 10:04:03
cbl_mariner
cbl_mariner
CVE-2018-12122 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
CVE-2019-5737 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
cve
cve
CVE-2018-12122
2018-11-28 17:29:00
CVE-2019-5737
2019-03-28 17:29:01
cvelist
cvelist
CVE-2018-12122
2018-11-28 17:00:00
CVE-2019-5737
2019-03-28 16:20:28
openvas
openvas
openSUSE: Security Advisory for nodejs10 (openSUSE-SU-2019:1211-1)
2019-04-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0627-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0636-1)
2021-06-09 00:00:00
attackerkb
attackerkb
CVE-2018-12122
2018-11-28 00:00:00
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
Design/Logic Flaw
2019-03-28 17:29:00
veracode
veracode
Denial Of Service (DoS)
2018-11-30 05:44:46
Denial Of Service (DoS)
2019-03-04 05:31:23
nvd
nvd
CVE-2018-12122
2018-11-28 17:29:00
CVE-2019-5737
2019-03-28 17:29:01
osv
osv
CVE-2018-12122
2018-11-28 17:29:00
CVE-2019-5737
2019-03-28 17:29:01
nodejs vulnerabilities
2021-03-15 21:18:37
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.15.3-alt1
2019-03-09 00:00:00
Security fix for the ALT Linux 10 package node version 10.14.1-alt1
2018-11-30 00:00:00
ibm
ibm
suse
suse
Security update for nodejs10 (moderate)
2019-04-16 00:00:00
Security update for nodejs6 (moderate)
2019-04-08 00:00:00
Security update for nodejs4 (moderate)
2019-03-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-12122
2018-11-28 17:29:00
CVE-2019-5737
2019-03-28 17:29:01
hackerone
hackerone
Node.js: Fix for CVE-2018-12122 can be bypassed via keep-alive requests
2018-12-01 10:03:22
debiancve
debiancve
CVE-2018-12122
2018-11-28 17:29:00
CVE-2019-5737
2019-03-28 17:29:01
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
(RHSA-2019:2939) Important: rh-nodejs10-nodejs security update
2019-09-30 23:10:11
(RHSA-2019:2925) Important: nodejs:10 security update
2019-09-30 07:07:29
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
freebsd
freebsd
Node.js -- multiple vulnerabilities
2019-02-28 00:00:00
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
f5
f5
photon
photon
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00
rocky
rocky
nodejs:10 security update
2019-09-30 07:07:29