UnratedFix available
Node.js 6.15.1 (LTS)
Node.js 6.15.1 corrects a backport issue related to the Slowloris HTTP denial-of-service fix. Users of Node.js 6.x LTS 'Boron' are advised to upgrade.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a patch release to address a bad backport of the fix for "Slowloris HTTP Denial of Service" (CVE-2018-12122).
Node.js
Node.js 6.15.1 (LTS)
- Affected versions
- 6.15.0
Node.js 6.15.0 misapplies the headers timeout to an entire keep-alive HTTP session
- Fixed versions
- 6.15.1
Node.js 6.15.1 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2018-12122
"Slowloris HTTP Denial of Service" (CVE-2018-12122)
Publisher severity
No explicit severity was extracted.
- Event
- #52196 · Revision 1
- Added to Heist Feed
- Publisher date