Unrated
CVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access Vulnerability
The announcement describes a denial-of-service vulnerability affecting Node.js v0.12.x through v5.x and a V8 out-of-bounds access vulnerability affecting v4.x and v5.x when user-supplied JavaScript can be executed. It says fixes will be included in upcoming releases; no fixed versions are specified.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
A bug exists in Node.js, all versions of v0.12.x through to v5.x inclusive, whereby an external attacker can cause a denial of service.
Node.js
A bug exists in Node.js, all versions of v0.12.x through to v5.x inclusive, whereby an external attacker can cause a denial of service.
- Affected versions
- v0.12.x through to v5.x inclusive
A bug exists in Node.js, all versions of v0.12.x through to v5.x inclusive, whereby an external attacker can cause a denial of service.
all versions of v4.x and v5.xAn additional bug exists in Node.js, all versions of v4.x and v5.x, whereby an attacker may be able to trigger an out-of-bounds access and/or denial of service if user-supplied JavaScript can be executed by an application.
- Fixed versions
- Not stated in this extraction
- Prerequisites
- if user-supplied JavaScript can be executed by an application
An additional bug exists in Node.js, all versions of v4.x and v5.x, whereby an attacker may be able to trigger an out-of-bounds access and/or denial of service if user-supplied JavaScript can be executed by an application.
- Related CVEs
- CVE-2015-8027
CVE-2015-8027: a high-impact denial of service vulnerability
CVE-2015-6764CVE-2015-6764: a low-impact V8 out-of-bounds access vulnerability
Publisher severity
No explicit severity was extracted.
- Event
- #71644 · Revision 1
- Added to Heist Feed
- Publisher date