CVE-2014-5256

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction…

published September 5, 2014

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service (memory corruption and application crash) via deep JSON objects whose parsing lets this interrupt mask an overflow of the program stack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03292 · 88.3th percentile
Published
2014-09-05T17:00Z
EPSS history
Timeline
  • 05 SEP 17:00Z
    Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction…
    cvelistv5