CVE-2018-7162 - CVE House
Back to Database
Status published High CVE-2018-7162

All versions of Node.js 9.x and 10.x are vulnerable and...

Vulnerability Description

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7162

Credits & Attribution

No credits recorded in the NVD database.

References

More from The Node.js Project

View All →
CVE-2018-7167
Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to...
High 7.5
CVE-2018-7166
In all versions of Node.js 10 prior to 10.9.0, an...
High 7.5
CVE-2018-7164
Node.js versions 9.7.0 and later and 10.x are vulnerable and...
High 7.5
CVE-2018-7161
All versions of Node.js 8.x, 9.x, and 10.x are vulnerable...
High 7.5
CVE-2018-7160
The Node.js inspector, in 6.x and later is vulnerable to...
High 8.8

Affected Vendor

The Node.js Project

View all reports →

Affected Software

Node.js
Vulnerable Versions:
9.x+, 10.x+

Timeline

Official Publish: June 13th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.