Lucene search

K
osvGoogleOSV:RLSA-2024:1444
HistoryMar 27, 2024 - 4:34 a.m.

Important: nodejs:16 security update

2024-03-2704:34:32
Google
osv.dev
7
node.js
security update
http vulnerabilities
cve-2024-22019
cve-2023-44487
ddos attack

7.2 High

AI Score

Confidence

Low

0.72 High

EPSS

Percentile

98.0%

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)

  • nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.