CVE-2013-4450

Related Files

Node.js HTTP Pipelining Denial of Service

Posted Aug 31, 2024

Authored by joev, titanous, Marek Majkowski | Site metasploit.com

This Metasploit module exploits a Denial of Service (DoS) condition in the HTTP parser of Node.js versions released before 0.10.21 and 0.8.26. The attack sends many pipelined HTTP requests on a single connection, which causes unbounded memory allocation when the client does not read the responses.

tags | exploit, web, denial of service

advisories | CVE-2013-4450

SHA-256 | 3c4090a80e405ae048f982af0147a29882b5e2144d973004c4f00f0a9a827a7b

Download | Favorite | View

Red Hat Security Advisory 2013-1842-01

Posted Dec 17, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1842-01 - Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. A denial of service flaw was found in the way Node.js handled pipelined HTTP requests. A remote attacker could use this flaw to send an excessive amount of HTTP requests over a network connection, causing Node.js to use an excessive amount of memory and possibly exit when all available memory is exhausted. Node.js is included in Red Hat Software Collections 1.0 as a Technology Preview.

tags | advisory, remote, web, denial of service, javascript

systems | linux, redhat

advisories | CVE-2013-4450

SHA-256 | 6cc658b52fc2d5fd70d630a89cba0152aa0d9dba36215c7daf88a66a5521cfcd

Download | Favorite | View