UpHeron
All vulnerabilities

Servers and applications

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

Severity
High 7.5
Published
30 Oct 2017
Last changed
14 Jul 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • Version 8.7.0
  • Version 8.6.0
  • Version 8.5.0
  • Version 8.4.0
All 23 release lines
  • Version 4.8.2
  • Version 4.8.3
  • Version 4.8.4
  • Version 6.10.2
  • Version 6.10.3
  • Version 6.11.0
  • Version 6.11.1
  • Version 6.11.2
  • Version 6.11.3
  • Version 6.11.4
  • Version 8.0.0
  • Version 8.1.0
  • Version 8.1.1
  • Version 8.1.2
  • Version 8.1.3
  • Version 8.1.4
  • Version 8.2.0
  • Version 8.2.1
  • Version 8.3.0
  • Version 8.4.0
  • Version 8.5.0
  • Version 8.6.0
  • Version 8.7.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-14919
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-14919