CVE-2017-14919 REJECTED

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

EPSS 1.04% · 77.4th percentile

Risk Scores

EPSS Score
1.04%
77.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSnodejs0, 6.11.4~dfsg-1ubuntu1, 6.11.4~dfsg-1ubuntu2

Timeline

References

Open in Interactive Console →