Lucene search

K
mageiaGentoo FoundationMGASA-2014-0007
HistoryJan 06, 2014 - 5:20 a.m.

Updated nodejs package fixes security vulnerabilities

2014-01-0605:20:19
Gentoo Foundation
advisories.mageia.org
16

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.3%

A denial of service flaw was found in the way Node.js handled pipelined HTTP requests. A remote attacker could use this flaw to send an excessive amount of HTTP requests over a network connection, causing Node.js to use an excessive amount of memory and possibly exit when all available memory is exhausted (CVE-2013-4450). Denial of service issues in the bundled v8 JavaScript library (CVE-2013-6639, CVE-2013-6640).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchnodejs< 0.10.24-1nodejs-0.10.24-1.mga3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.3%