All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.

🗓️ 06 Jun 2021 00:00:00Reported by MicrosoftType

All Node.js nine and ten versions are vulnerable to high severity DoS via TLS handshake messages; fixed by TLS update.

Reporter	Title	Published	Views	Family All 33
FreeBSD	node.js -- multiple vulnerabilities	12 Jun 201800:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private and IBM Cloud Private Cloud Foundry (CVE-2018-7167, CVE-2018-7164, CVE-2018-7162, CVE-2018-1000168, CVE-2018-7161)	26 Sep 201818:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Sep 201818:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	15 Sep 202219:20	–	ibm
CBLMariner	CVE-2018-7162 affecting package nodejs 8.11.4-7	11 Aug 202106:39	–	cbl_mariner
CNVD	Node.js Denial of Service Vulnerability (CNVD-2018-11809)	14 Jun 201800:00	–	cnvd
Check Point Advisories	Node.js Foundation Node.js TLS Denial of Service (CVE-2018-7162)	14 Feb 201900:00	–	checkpoint_advisories
CVE	CVE-2018-7162	13 Jun 201816:00	–	cve
Cvelist	CVE-2018-7162	13 Jun 201816:00	–	cvelist
Debian CVE	CVE-2018-7162	13 Jun 201816:00	–	debiancve