CVE-2018-12121
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 28, 2018
Updated: Dec 27, 2024
CWE ID 400
Summary
CVE-2018-12121 is a Denial of Service vulnerability affecting Node.js versions prior to 6.15.0, 8.14.0, 10.14.0, and 11.3.0. An attacker can exploit this issue by sending a large number of requests, each with maximum-sized headers, causing the HTTP server to abort due to heap allocation failure. The potential impact is reduced if a load balancer or other proxy layer is used.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Nodejs Node.js
- Red Hat Enterprise Linux
- RedHat Enterprise Linux Server
- Redhat Enterprise Linux Workstation
Affected Vendors
- Red Hat
- NODE JS