Node.js CVE-2013-4450 Denial of Service Vulnerability

Bugtraq ID:	63229
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-4450
Remote:	Yes
Local:	No
Published:	Oct 18 2013 12:00AM
Updated:	Apr 18 2017 01:05AM
Credit:	isaacs
Vulnerable:	S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 Juniper NorthStar Controller Application 2.1.0 Joyent Node.js 0.10.20 Joyent Node.js 0.8.25 Joyent Node.js 0.7.8 Joyent Node.js 0.7.7 Joyent Node.js 0.6.16 Joyent Node.js 0.6.15
Not Vulnerable:	Juniper NorthStar Controller Application 2.1.0 Service Pack 1 Joyent Node.js 0.10.21 Joyent Node.js 0.8.26

Node.js CVE-2013-4450 Denial of Service Vulnerability

Node.js is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to cause denial-of-service conditions.

Node.js CVE-2013-4450 Denial of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Node.js CVE-2013-4450 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Node.js CVE-2013-4450 Denial of Service Vulnerability

References:

• http: provide backpressure for pipeline flood (isaacs )
  
• Node v0.10.21 (Stable) (Joyent)
  
• Node v0.8.26 (Maintenance) (Joyent)
  
• Node.js Homepage (Joyent)
  
• Re: CVE Request: Node.js HTTP Pipelining DoS (oss-sec)
  
• 2107-04 Security Bulletin: Multiple Vulnerabilities in NorthStar Controller Appl (juniper)
  
• nodejs010-nodejs security update (Red Hat)
  
• openSUSE-SU-2013:1863-1: moderate: update for nodejs (SUSE)