CVE-2020-8251

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accep...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami node-min

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.11.0"}]}]

Bitnami node

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.11.0"}]}]

参照URL

advisory nodejs.org
advisory security.gentoo.org
advisory security.netapp.com
web hackerone.com
web lists.fedoraproject.org
web nvd.nist.gov