UBUNTU-CVE-2013-4450

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2013-4450
Published: 21 Oct 2013, 17:55
Last modified:16 Jul 2025, 07:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Oct 2013, 17:55
Published
Vulnerability first disclosed
16 Jul 2025, 07:31
Last Modified
Vulnerability information updated

Description

The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.

Affected Systems

  • ubuntu•nodejs

    < 0.10.25~dfsg2-2ubuntu1 | < 0.10.25~dfsg2-2ubuntu1

References (4)