Lucene search

K
cvelistNodejsCVELIST:CVE-2017-15896
HistoryDec 07, 2017 - 12:00 a.m.

CVE-2017-15896

2017-12-0700:00:00
nodejs
raw.githubusercontent.com
1

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.