CVE-2020-8251

High

Description

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

SeverityHigh

CVSS7.5

Exploit probability95. percentile8.4%

Product

Nodejs Node.js

PublishedSep 18, 2020

First seenSep 18, 2020

Weakness typeCWE-400Uncontrolled resource consumption

How to fix

Update

nodejs node.js14.11.0 or later

Vendor advisories

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
security.gentoo.org/glsa/202101-07

Affected products

Product	Affected versions	Fixed in
nodejs node.js	14.0.0 ≤ v < 14.11.0	14.11.0
fedoraproject fedora	33	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.