Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-11499
HistoryJul 25, 2017 - 12:00 a.m.

CVE-2017-11499

2017-07-2500:00:00
ubuntu.com
ubuntu.com
16

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.009 Low

EPSS

Percentile

82.5%

JSON

Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0,
v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash
flooding remote DoS attacks as the HashTable seed was constant across a
given released version of Node.js. This was a result of building with V8
snapshots enabled by default which caused the initially randomized seed to
be overwritten on startup.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchnodejs< anyUNKNOWN

Related

redhat 2
ibm 9
openvas 4
osv 1
redhatcve 1
veracode 1
cvelist 1
nvd 1
cve 1
prion 1
nessus 3
debiancve 1
nodejsblog 1
redhat
redhat
(RHSA-2017:3002) Moderate: rh-nodejs4-nodejs security and bug fix update
2017-10-23 09:00:22
(RHSA-2017:2908) Moderate: rh-nodejs6-nodejs security update
2017-10-18 07:32:26
ibm
ibm
Security Bulletin: Vulnerability in Node.js affects IBM DataPower Gateways (CVE-2017-11499)
2018-06-15 07:08:06
Security Bulletin: IBM Integration Bus is affected by Node.js security vulnerability ( CVE-2017-1000381 and CVE-2017-11499 )
2020-03-23 20:41:52
Security Bulletin: Multiple vulnerabilities in Node.js affects IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux
2018-08-03 04:23:43
openvas
openvas
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Linux
2018-03-02 00:00:00
Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Windows
2018-03-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2168-1)
2021-06-09 00:00:00
osv
osv
CVE-2017-11499
2017-07-25 13:29:00
redhatcve
redhatcve
CVE-2017-11499
2020-03-23 02:08:59
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:20:31
cvelist
cvelist
CVE-2017-11499
2017-07-25 13:00:00
nvd
nvd
CVE-2017-11499
2017-07-25 13:29:00
cve
cve
CVE-2017-11499
2017-07-25 13:29:00
prion
prion
Default credentials
2017-07-25 13:29:00
nessus
nessus
RHEL 6 / 7 : rh-nodejs4-nodejs (RHSA-2017:3002)
2024-04-27 00:00:00
openSUSE Security Update : nodejs4 / nodejs6 (openSUSE-2017-948)
2017-08-18 00:00:00
SUSE SLES12 Security Update : nodejs4, nodejs6 (SUSE-SU-2017:2168-1)
2019-01-02 00:00:00
debiancve
debiancve
CVE-2017-11499
2017-07-25 13:29:00
nodejsblog
nodejsblog
Security updates for all active release lines, July 2017
2017-07-11 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.009 Low

EPSS

Percentile

82.5%

JSON
Related for UB:CVE-2017-11499
redhat2ibm9openvas4osv1redhatcve1veracode1cvelist1nvd1cve1prion1nessus3debiancve1nodejsblog1