CVE-2015-8027

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote…

published January 2, 2016

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05356 · 92.6th percentile
Published
2016-01-02T21:00Z
EPSS history
Timeline
  • 02 JAN 21:00Z
    Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote…
    cvelistv5