Lucene search

CVE-2024-22019

🗓️ 20 Feb 2024 02:50:15Reported by hackeroneType

A vulnerability in Node.js HTTP servers allows remote attackers to exhaust resources via crafted HTTP requests

Reporter	Title	Published	Views	Family All 160
Prion	Design/Logic Flaw	20 Feb 202402:15	–	prion
Hacker One	Internet Bug Bounty: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks	15 Feb 202418:19	–	hackerone
Hacker One	Node.js: http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks	30 Oct 202321:18	–	hackerone
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js	29 Aug 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is vulnerable to Denial of Service due to use of Node.js	1 Apr 202411:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality and denial of service due to [CVE-2023-46809] [CVE-2024-21892] [CVE-2024-22019]	23 Apr 202414:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js.	10 May 202414:52	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control	8 Jul 202409:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational® Application Developer for WebSphere® Software is vulnerable to a denial of service	13 May 202423:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Voice Gateway	1 Apr 202418:28	–	ibm

Vulners

Vulnrichment

Node

node.js node.jsRange≤21.6.1

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Node.js",
    "product": "Node.js",
    "versions": [
      {
        "version": "21.6.1",
        "status": "affected",
        "lessThanOrEqual": "21.6.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240315-0004/
hackerone	www.hackerone.com/reports/2233486
openwall	www.openwall.com/lists/oss-security/2024/03/11/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Feb 2024 02:15Current

7.2High risk

Vulners AI Score7.2

CVSS37.5

EPSS0.0004

SSVC

CWE-404