CVE-2018-12122 - AskarLabs CVE Database

CVE-2018-12122

Vendor The Node.js Project

Product Node.js

Weakness CWE-400

Published November 28, 2018

Last update December 13, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

Key dates

02Disclosure timeline

November 28, 2018 CVE published

December 13, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-12122 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2022-46351 CVE-2023-46104 Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb CVE-2021-0257 Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface CVE-2024-1014 Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 CVE-2023-30769 Rab13s Exploit