Lucene search
Veracode Vulnerability DatabaseVERACODE:7518HistorySep 24, 2018 - 5:08 a.m.
HTTP Response Splitting
2018-09-2405:08:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.004
Percentile
74.9%
nodejs is vulnerable to HTTP response splitting. This is due to a lack of validation for permitted characters in the reason argument in ServerResponse#writeHead() function. An attacker is able to inject arbitrary HTTP headers into the server response via the affected argument and perform HTTP response splitting attacks.
Related
ubuntucve
ubuntucve
CVE-2016-5325
2016-10-10 00:00:00
redhatcve
redhatcve
CVE-2016-5325
2016-06-15 16:19:00
cvelist
cvelist
CVE-2016-5325
2016-10-10 16:00:00
cve
cve
CVE-2016-5325
2016-10-10 16:59:00
prion
prion
Crlf injection
2016-10-10 16:59:00
debiancve
debiancve
CVE-2016-5325
2016-10-10 16:59:00
nvd
nvd
CVE-2016-5325
2016-10-10 16:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0204)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2470-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2470-1)
2021-06-09 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2017-07-13 12:10:46
redhat
redhat
nessus
nessus
RHEL 7 : nodejs and nodejs-tough-cookie (RHSA-2016:2101)
2018-12-04 00:00:00
GLSA-201612-43 : Node.js: Multiple vulnerabilities
2016-12-14 00:00:00
SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2016:2470-1)
2019-01-02 00:00:00
ibm
ibm
nodejsblog
nodejsblog
Security updates for all active release lines, June 2016
2016-06-13 00:00:00
Security updates for all active release lines, September 2016
2016-09-23 00:00:00
gentoo
gentoo
Node.js: Multiple vulnerabilities
2016-12-13 00:00:00
f5
f5
suse
suse
Security update for nodejs4 (important)
2016-10-06 20:14:21
Security update for nodejs4 (important)
2016-11-01 16:19:35
Security update for nodejs (important)
2016-10-11 19:20:03