CADRA Node.js zlib DoS

The vulnerability of the zlib module in CADRA’s Node.js software lies in insufficient validation of input data during the processing of the windowBits parameter. Exploiting this vulnerability could allow an attacker to cause service failures...

EUVD-2017-6397

Malware in sbrugna...

SUSE CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

ALPINE-CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

UBUNTU-CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

Code injection

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919: Improper Input Validation

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

PT-2017-13753

Name of the Vulnerable Software and Affected Versions Node.js versions prior to 4.8.5 Node.js versions 6.x prior to 6.11.5 Node.js versions 8.x prior to 8.8.0 Description The issue allows remote attackers to cause a denial of service by leveraging a change in the zlib module, making 8 an invalid...

Denial Of Service (DoS)

node is vulnerable to denial of service DoS attacks. These attacks are possible due to a change in the zlib module. The change causes node to throw an error when the an invalid value of 8 is given for windowBits...