Denial Of Service (DoS)

🗓️ 23 Sep 2014 13:51:27Reported by Veracode Vulnerability DatabaseType

Node vulnerable to DoS via V8 garbage collectio

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Current Release of IBM® SDK for Node.js™ is affected by CVE-2014-5256	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affecting the Cordova platform and IBM SDK Node.js packaged with Rational Software Architect and Rational Software Architect for WebSphere Software	10 Sep 202015:43	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js affects the IBM Business Process Manager (BPM) configuration editor (CVE-2014-5256)	15 Jun 201807:01	–	ibm
CVE	CVE-2014-5256	5 Sep 201417:00	–	cve
Cvelist	CVE-2014-5256	5 Sep 201417:00	–	cvelist
Debian CVE	CVE-2014-5256	5 Sep 201417:00	–	debiancve
EUVD	EUVD-2014-5149	7 Oct 202500:30	–	euvd
Tenable Nessus	Mandriva Linux Security Advisory : nodejs (MDVSA-2015:142)	30 Mar 201500:00	–	nessus
Tenable Nessus	RHEL 6 : v8 (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2014-5256	4 Mar 202500:00	–	nessus

Vulners

Node

node nodeRange0.8.0–0.8.27js

node nodeRange0.10.0–0.10.29js

v8314-v8 v8314-v8Match3.14.5.10_3.6.el6

Source	Link
secunia	www.secunia.com/advisories/61260
advisories	www.advisories.mageia.org/MGASA-2014-0516.html
www-01	www.www-01.ibm.com/support/docview.wss
mandriva	www.mandriva.com/security/advisories
blog	www.blog.nodejs.org/2014/07/31/v8-memory-corruption-stack-overflow/
github	www.github.com/joyent/node/commit/530af9cb8e700e7596b3ec812bad123c9fa06356

15 May 2019 06:18Current

6Medium risk

Vulners AI Score6

CVSS 25

EPSS0.01263