7.5
CVSSv3

CVE-2017-11499

Published: 25/07/2017 Updated: 07/12/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nodejs node.js 8.0.0

nodejs node.js 7.0.0

nodejs node.js 7.4.0

nodejs node.js 7.5.0

nodejs node.js 7.9.0

nodejs node.js 6.0.0

nodejs node.js 6.11.1

nodejs node.js 6.2.0

nodejs node.js 6.6.0

nodejs node.js 6.7.0

nodejs node.js 6.9.5

nodejs node.js 5.0.0

nodejs node.js 5.12.0

nodejs node.js 5.2.0

nodejs node.js 5.7.1

nodejs node.js 5.8.0

nodejs node.js 4.2.1

nodejs node.js 4.2.2

nodejs node.js 4.3.2

nodejs node.js 4.4.0

nodejs node.js 4.4.7

nodejs node.js 4.5.0

nodejs node.js 4.6.0

nodejs node.js 4.8.0

nodejs node.js 4.8.1

nodejs node.js 8.1.1

nodejs node.js 8.1.0

nodejs node.js 7.2.1

nodejs node.js 7.3.0

nodejs node.js 7.7.4

nodejs node.js 7.8.0

nodejs node.js 6.10.3

nodejs node.js 6.11.0

nodejs node.js 6.4.0

nodejs node.js 6.5.0

nodejs node.js 8.1.3

nodejs node.js 8.1.2

nodejs node.js 7.10.1

nodejs node.js 7.2.0

nodejs node.js 7.7.1

nodejs node.js 7.7.2

nodejs node.js 7.7.3

nodejs node.js 6.9.3

nodejs node.js 6.9.4

nodejs node.js 5.11.0

nodejs node.js 5.11.1

nodejs node.js 5.6.0

nodejs node.js 5.7.0

nodejs node.js 4.1.2

nodejs node.js 4.2.0

nodejs node.js 4.3.0

nodejs node.js 4.3.1

nodejs node.js 4.4.5

nodejs node.js 4.4.6

nodejs node.js 4.7.2

nodejs node.js 4.7.3

nodejs node.js 6.10.1

nodejs node.js 6.10.2

nodejs node.js 6.3.0

nodejs node.js 6.3.1

nodejs node.js 6.9.0

nodejs node.js 6.9.1

nodejs node.js 6.9.2

nodejs node.js 5.10.0

nodejs node.js 5.10.1

nodejs node.js 5.4.1

nodejs node.js 5.5.0

nodejs node.js 4.1.0

nodejs node.js 4.1.1

nodejs node.js 4.2.5

nodejs node.js 4.2.6

nodejs node.js 4.4.3

nodejs node.js 4.4.4

nodejs node.js 4.7.0

nodejs node.js 4.7.1

nodejs node.js 7.1.0

nodejs node.js 7.10.0

nodejs node.js 7.6.0

nodejs node.js 7.7.0

nodejs node.js 6.1.0

nodejs node.js 6.10.0

nodejs node.js 6.2.1

nodejs node.js 6.2.2

nodejs node.js 6.8.0

nodejs node.js 6.8.1

nodejs node.js 5.1.0

nodejs node.js 5.1.1

nodejs node.js 5.3.0

nodejs node.js 5.4.0

nodejs node.js 5.9.0

nodejs node.js 5.9.1

nodejs node.js 4.0.0

nodejs node.js 4.2.3

nodejs node.js 4.2.4

nodejs node.js 4.4.1

nodejs node.js 4.4.2

nodejs node.js 4.6.1

nodejs node.js 4.6.2

nodejs node.js 4.8.2

nodejs node.js 4.8.3

Vendor Advisories

Synopsis Moderate: rh-nodejs6-nodejs security update Type/Severity Security Advisory: Moderate Topic An update for rh-nodejs6-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...
Synopsis Moderate: rh-nodejs4-nodejs security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for rh-nodejs4, rh-nodejs4-node-gyp, and rh-nodejs4-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact o ...