CVE-2020-8251

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

Score

CVSS 3.1 7.5 High

Status

Modified - support@hackerone.com

Published

2020-09-18

Last modified

2025-04-30

Weaknesses

CWE-400

Affected products

• Fedora (Fedoraproject)
• Node (Nodejs)
• Node.js (Nodejs)

References

• https://hackerone.com/reports/868834
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UX…
• https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
• https://security.gentoo.org/glsa/202101-07
• https://security.netapp.com/advisory/ntap-20201009-0004/