Lucene search
K

6 matches found

RedHat Linux
RedHat Linux
added 2024/04/22 1:14 a.m.0 views

nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks

A flaw was found in Node.js due to a lack of safeguards on chunk extension bytes. The server may read an unbounded number of bytes from a single connection, which can allow an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and a denial of...

7.5CVSS7.1AI score0.0038EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/03/25 8:29 p.m.1 views

nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks

A flaw was found in Node.js due to a lack of safeguards on chunk extension bytes. The server may read an unbounded number of bytes from a single connection, which can allow an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and a denial of...

7.5CVSS7.1AI score0.0038EPSS
Exploits0References4
OSV
OSV
added 2024/02/20 2:15 a.m.2 views

AZL-34461 CVE-2024-22019 affecting package nodejs18 for versions less than 18.20.2-1

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service DoS. The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk...

7.5CVSS6.9AI score0.0038EPSS
Exploits0References1
OSV
OSV
added 2024/02/20 2:15 a.m.2 views

DEBIAN-CVE-2024-22019

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service DoS. The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk...

7.5CVSS7AI score0.0038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/20 1:31 a.m.24 views

CVE-2024-22019

A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service DoS. The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk...

7.5CVSS7.4AI score0.0038EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/02/16 5:52 p.m.56 views

CVE-2024-22019

A flaw was found in Node.js due to a lack of safeguards on chunk extension bytes. The server may read an unbounded number of bytes from a single connection, which can allow an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and a denial of...

7.5CVSS6AI score0.0038EPSS
Exploits0References3
Rows per page
Query Builder