Skip to content
Heist/ feed
UnratedFix available

Node.js 8.16.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 8.16.1 (LTS) is a security release addressing HTTP/2 denial-of-service vulnerabilities.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release. Node.js, as well as many other implementations of HTTP/2, have been found vulnerable to Denial of Service attacks.

Node.js

Node.js 8.16.1 (LTS)
Affected versions
Not stated in this extraction
Fixed versions
8.16.1
Node.js 8.16.1 (LTS)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2019-9511
CVE-2019-9511 “Data Dribble”
CVE-2019-9512
CVE-2019-9512 “Ping Flood”
CVE-2019-9513
CVE-2019-9513 “Resource Loop”
CVE-2019-9514
CVE-2019-9514 “Reset Flood”
CVE-2019-9515
CVE-2019-9515 “Settings Flood”
CVE-2019-9516
CVE-2019-9516 “0-Length Headers Leak”
CVE-2019-9517
CVE-2019-9517 “Internal Data Buffering”
CVE-2019-9518
CVE-2019-9518 “Empty Frames Flood”

Publisher severity

No explicit severity was extracted.

Event
#48505 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement