Denial Of Service (DoS)

nodejs is vulnerable to Denial Of Service (DoS). The vulnerability exists when an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API. A non-expected termination occurs, making it susceptible to Denial of Service (DoS) attacks. In this scenario, an attacker could force interruptions of application processing, as the process terminates when accessing public key info of provided certificates from user code. This results in the loss of the current context of users, causing a DoS scenario.