THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2017-14919 (HIGH 7.5) — Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

[NVD] CVE-2017-14919 (HIGH 7.5) — Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

lownvdPublished 2017-10-30

CVE-2017-14919 CVSS: 7.5 HIGH Published: 2017-10-30T19:29:00.420

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.

Indicators of compromise

CVE-2017-14919cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2017-14919