Back to Database
Status published
Medium
CVE-2013-4450
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x...
Vulnerability Description
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4450
Credits & Attribution
No credits recorded in the NVD database.
References
- https://kb.juniper.net/JSA10783
- http://rhn.redhat.com/errata/RHSA-2013-1842.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00051.html
- http://www.openwall.com/lists/oss-security/2013/10/20/1
- http://www.securityfocus.com/bid/63229
- http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
- http://blog.nodejs.org/2013/10/18/node-v0-8-26-maintenance/
- https://github.com/rapid7/metasploit-framework/pull/2548
- https://groups.google.com/forum/#%21topic/nodejs/NEbweYB0ei0
- https://github.com/joyent/node/issues/6214
More from nodejs
View All →CVE-2025-59466
We have identified a bug in Node.js error handling where...
Medium
5.9
CVE-2025-59465
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data...
High
7.5
CVE-2025-59464
A memory leak in Node.js’s OpenSSL integration occurs when converting...
Medium
6.5
CVE-2025-55132
A flaw in Node.js's permission model allows a file's access...
Low
2.8
CVE-2025-55131
A flaw in Node.js's buffer allocation logic can expose uninitialized...
High
7.1
Affected Vendor
nodejs
View all reports →Affected Software
nodejs
Vulnerable Versions:
0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.8.10, 0.8.11, 0.8.12, 0.8.13, 0.8.14, 0.8.15, 0.8.16, 0.8.17, 0.8.18, 0.8.19, 0.8.20, 0.8.21, 0.8.22, 0.8.23, 0.8.24, 0.8.25, 0.10.0, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.10.7, 0.10.8, 0.10.9, 0.10.10, 0.10.11, 0.10.12, 0.10.13, 0.10.14, 0.10.15, 0.10.16, 0.10.17, 0.10.18, 0.10.19, 0.10.20
Timeline
Official Publish:
October 21st, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.