Lucene search
Veracode Vulnerability DatabaseVERACODE:12696HistoryJan 15, 2019 - 9:20 a.m.
Denial Of Service (DoS)
2019-01-1509:20:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.009 Low
EPSS
Percentile
82.5%
rh-nodejs4 is vulnerable to denial of service (DoS) attacks. The vulnerability exists as Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
Related
redhat
redhat
(RHSA-2017:3002) Moderate: rh-nodejs4-nodejs security and bug fix update
2017-10-23 09:00:22
(RHSA-2017:2908) Moderate: rh-nodejs6-nodejs security update
2017-10-18 07:32:26
ibm
ibm
openvas
openvas
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Linux
2018-03-02 00:00:00
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Windows
2018-03-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2168-1)
2021-06-09 00:00:00
osv
osv
CVE-2017-11499
2017-07-25 13:29:00
ubuntucve
ubuntucve
CVE-2017-11499
2017-07-25 00:00:00
redhatcve
redhatcve
CVE-2017-11499
2020-03-23 02:08:59
nessus
nessus
RHEL 6 / 7 : rh-nodejs4-nodejs (RHSA-2017:3002)
2024-04-27 00:00:00
openSUSE Security Update : nodejs4 / nodejs6 (openSUSE-2017-948)
2017-08-18 00:00:00
SUSE SLES12 Security Update : nodejs4, nodejs6 (SUSE-SU-2017:2168-1)
2019-01-02 00:00:00
debiancve
debiancve
CVE-2017-11499
2017-07-25 13:29:00
cvelist
cvelist
CVE-2017-11499
2017-07-25 13:00:00
nvd
nvd
CVE-2017-11499
2017-07-25 13:29:00
cve
cve
CVE-2017-11499
2017-07-25 13:29:00
prion
prion
Default credentials
2017-07-25 13:29:00
nodejsblog
nodejsblog
Security updates for all active release lines, July 2017
2017-07-11 00:00:00