Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-11499
HistoryJul 25, 2017 - 1:29 p.m.

CVE-2017-11499

2017-07-2513:29:00
CWE-20
[email protected]
web.nvd.nist.gov
31
cve-2017-11499
node.js
hash flooding
dos attacks
security vulnerability
nvd
v8 snapshots

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON

Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.

Related

ibm 9
openvas 4
redhat 2
osv 1
redhatcve 1
veracode 1
ubuntucve 1
nessus 3
debiancve 1
prion 1
cvelist 1
nodejsblog 1
ibm
ibm
Security Bulletin: Vulnerability in Node.js affects IBM DataPower Gateways (CVE-2017-11499)
2018-06-15 07:08:06
Security Bulletin: Multiple vulnerabilities in Node.js affects IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux
2018-08-03 04:23:43
Security Bulletin: IBM Integration Bus is affected by Node.js security vulnerability ( CVE-2017-1000381 and CVE-2017-11499 )
2020-03-23 20:41:52
openvas
openvas
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Linux
2018-03-02 00:00:00
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Windows
2018-03-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2168-1)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2017:3002) Moderate: rh-nodejs4-nodejs security and bug fix update
2017-10-23 09:00:22
(RHSA-2017:2908) Moderate: rh-nodejs6-nodejs security update
2017-10-18 07:32:26
osv
osv
CVE-2017-11499
2017-07-25 13:29:00
redhatcve
redhatcve
CVE-2017-11499
2020-03-23 02:08:59
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:20:31
ubuntucve
ubuntucve
CVE-2017-11499
2017-07-25 00:00:00
nessus
nessus
RHEL 6 / 7 : rh-nodejs4-nodejs (RHSA-2017:3002)
2024-04-27 00:00:00
SUSE SLES12 Security Update : nodejs4, nodejs6 (SUSE-SU-2017:2168-1)
2019-01-02 00:00:00
openSUSE Security Update : nodejs4 / nodejs6 (openSUSE-2017-948)
2017-08-18 00:00:00
debiancve
debiancve
CVE-2017-11499
2017-07-25 13:29:00
prion
prion
Default credentials
2017-07-25 13:29:00
cvelist
cvelist
CVE-2017-11499
2017-07-25 13:00:00
nodejsblog
nodejsblog
Security updates for all active release lines, July 2017
2017-07-11 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON
Related for CVE-2017-11499
ibm9openvas4redhat2osv1redhatcve1veracode1ubuntucve1nessus3debiancve1prion1cvelist1nodejsblog1