CVE-2022-35256

🗓️ 05 Dec 2022 00:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 428 Views

Node v18.7.0 llhttp parser vulnerabilit

Reporter	Title	Published	Views	Family All 256
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to Node.js (CVE-2022-43548 & CVE-2022-35256)	6 Jan 202314:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Event Streams (CVE-2022-35255 and CVE-2022-35256)	28 Oct 202215:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to HTTP request smuggling (CVE-2022-35256)	16 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability is addressed with IBM Cloud Pak for Business Automation iFixes for November 2022	26 Mar 202502:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	27 Oct 202210:20	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.8 and earlier	27 Oct 202215:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	21 Oct 202220:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm

NVD

Vulners

Node

nodejs node.jsRange14.0.0–14.14.0-

nodejs node.jsRange14.15.0–14.20.1lts

nodejs node.jsRange16.0.0–16.12.0-

nodejs node.jsRange16.13.0–16.17.1lts

nodejs node.jsRange18.0.0–18.9.1-

Node

llhttp llhttpRange<6.0.10node.js

Node

siemens sinec_insRange<1.0

siemens sinec_insMatch1.0-

siemens sinec_insMatch1.0sp1

siemens sinec_insMatch1.0sp2

Node

debian debian_linuxMatch11.0

[
  {
    "product": "Node",
    "vendor": "NodeJS",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "4.0",
        "status": "affected",
        "lessThan": "4.*"
      },
      {
        "versionType": "semver",
        "version": "5.0",
        "status": "affected",
        "lessThan": "5.*"
      },
      {
        "versionType": "semver",
        "version": "6.0",
        "status": "affected",
        "lessThan": "6.*"
      },
      {
        "versionType": "semver",
        "version": "7.0",
        "status": "affected",
        "lessThan": "7.*"
      },
      {
        "versionType": "semver",
        "version": "8.0",
        "status": "affected",
        "lessThan": "8.*"
      },
      {
        "versionType": "semver",
        "version": "9.0",
        "status": "affected",
        "lessThan": "9.*"
      },
      {
        "versionType": "semver",
        "version": "10.0",
        "status": "affected",
        "lessThan": "10.*"
      },
      {
        "versionType": "semver",
        "version": "11.0",
        "status": "affected",
        "lessThan": "11.*"
      },
      {
        "versionType": "semver",
        "version": "12.0",
        "status": "affected",
        "lessThan": "12.*"
      },
      {
        "versionType": "semver",
        "version": "13.0",
        "status": "affected",
        "lessThan": "13.*"
      },
      {
        "versionType": "semver",
        "version": "14.0",
        "status": "affected",
        "lessThan": "14.20.1"
      },
      {
        "versionType": "semver",
        "version": "15.0",
        "status": "affected",
        "lessThan": "15.*"
      },
      {
        "versionType": "semver",
        "version": "16.0",
        "status": "affected",
        "lessThan": "16.17.1"
      },
      {
        "versionType": "semver",
        "version": "17.0",
        "status": "affected",
        "lessThan": "17.*"
      },
      {
        "versionType": "semver",
        "version": "18.0",
        "status": "affected",
        "lessThan": "18.9.1"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2023/dsa-5326
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
hackerone	www.hackerone.com/reports/1675191

30 Apr 2025 22:24Current

7.9High risk

Vulners AI Score7.9

CVSS 3.16.5

EPSS0.03694

SSVC

CWE-444