The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-dbg",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-dev",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-legacy",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
}
]
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-dbg",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-dev",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
},
{
"binary_name": "nodejs-legacy",
"binary_version": "0.10.25~dfsg2-2ubuntu1"
}
]
}