Denial of Service Vulnerability in Node.js HTTP/2 Server
CVE-2018-7161

7.5HIGH

Key Information:

Vendor: The Node.js Project
Status: Node.js
Vendor: CVE Published:; 13 June 2018

🔔 Create The Node.js Project Vulnerability Alert

What is CVE-2018-7161?

A vulnerability exists in all versions of Node.js 8.x, 9.x, and 10.x that can enable attackers to perform a Denial of Service (DoS) attack. The issue arises when interacting with an HTTP/2 server in a way that triggers a cleanup bug, resulting in a crash of the node server. This occurs due to the improper handling of objects in the native code after they have been released. The vulnerability has been addressed with updates to the HTTP/2 implementation. It is crucial for users to upgrade to the latest versions to safeguard their applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch