Mend Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2017-11499

Good to know:

icon

Date: July 25, 2017

Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.

Language: C#

Severity Score

Related Resources (5)

http://www.securityfocus.com/bid/99959
https://nvd.nist.gov/vuln/detail/CVE-2017-11499
https://people.canonical.com/~ubuntu-security/cve/CVE-2017-11499
https://access.redhat.com/errata/RHSA-2017:3002
https://www.mend.io/vulnerability-database/CVE-2017-11499

Severity Score

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

icon

Upgrade Version

Upgrade to version nodejs 8.1.4,nodejs 4.8.4,nodejs 6.11.1,nodejs 7.10.1

Learn More

CVSS v3

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us