Red Hat Security Advisory

RHSA-2019:3497

http-parser security and bug fix update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) http-parser-2.8.0-5.el8

Fixes 1 record

TI-2018-08694 CVE-2018-12121 · GHSA-2p2c-vwq7-7vg6

Uncontrolled resource consumption in NodeJS Node.js

MEDIUM 51

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10207 Published 2018-11-28 Partial fix CWE-400