Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 11/12/2017 Updated: 16/08/2022

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nodejs node.js

Nodejs was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure The result was that an active network attacker could send application data to Nodejs using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption ...

NVD-CWE-noinfo https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-15896

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-15896

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect