UpHeron
All vulnerabilities

Servers and applications

CVE-2018-12121

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load…

Severity
High 7.5
Published
28 Nov 2018
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
6.15.0, 8.14.0, 10.14.0, 11.3.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 6.0.0 before 6.15.0
  • From 8.0.0 before 8.14.0
  • From 10.0.0 before 10.14.0
  • From 11.0.0 before 11.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-12121
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-12121