UnratedFix available
V8 Memory Corruption and Stack Overflow
A V8 memory corruption vulnerability in Node.js 0.8 and 0.10 can cause a denial of service when deeply recursive workloads trigger garbage collection and an interrupt. The issue is fixed in Node.js v0.8.28 and v0.10.30; limiting JSON request sizes is suggested as a mitigation.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10.
Node.js
The Node.js Project V8 Memory Corruption and Stack Overflow
- Affected versions
- 0.8
the versions of V8 that ship with Node.js 0.8 and 0.10
0.10the versions of V8 that ship with Node.js 0.8 and 0.10
- Fixed versions
- v0.8.28
And has been released in the following versions: v0.10.30 v0.8.28
v0.10.30And has been released in the following versions: v0.10.30 v0.8.28
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2015-8027
PreviousCVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access VulnerabilityNext
Publisher severity
No explicit severity was extracted.
- Event
- #73372 · Revision 1
- Added to Heist Feed
- Publisher date