CVE-2019-15604 PUBLISHED

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

EPSS 3.53% · 87.6th percentile

Risk Scores

EPSS Score
3.53%
87.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSnodejs0, 0.10.25~dfsg2-2ubuntu1, 4.2.2~dfsg-1
Ubuntu:Pro:18.04:LTSnodejs0, 6.11.4~dfsg-1ubuntu1, 6.11.4~dfsg-1ubuntu2

Timeline

References

Open in Interactive Console →