Lucene search

K
redhatRedHatRHSA-2013:1842
HistoryDec 16, 2013 - 12:00 a.m.

(RHSA-2013:1842) Moderate: nodejs010-nodejs security update

2013-12-1600:00:00
access.redhat.com
13

0.08 Low

EPSS

Percentile

94.3%

Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

A denial of service flaw was found in the way Node.js handled pipelined
HTTP requests. A remote attacker could use this flaw to send an excessive
amount of HTTP requests over a network connection, causing Node.js to use
an excessive amount of memory and possibly exit when all available memory
is exhausted. (CVE-2013-4450)

Node.js is included in Red Hat Software Collections 1.0 as a Technology
Preview. More information about Red Hat Technology Previews is available
here: https://access.redhat.com/support/offerings/techpreview/

All nodejs010-nodejs users are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue.