SecuritySpace - CVE-2018-7164

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-7164

Description: Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.

Test IDs: 1.3.6.1.4.1.25623.1.0.813478 1.3.6.1.4.1.25623.1.0.813469

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-7164
BugTraq ID: 104463
http://www.securityfocus.com/bid/104463
https://security.gentoo.org/glsa/202003-48

CVE ID:	CVE-2018-7164
Description:	Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.
Test IDs:	1.3.6.1.4.1.25623.1.0.813478 1.3.6.1.4.1.25623.1.0.813469
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7164 BugTraq ID: 104463 http://www.securityfocus.com/bid/104463 https://security.gentoo.org/glsa/202003-48