What is GHSA-h4wv-8vxr-jgjq?

GHSA-h4wv-8vxr-jgjq is a security advisory published by GitHub Security Advisories with High severity. All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can...

Which CVE IDs does GHSA-h4wv-8vxr-jgjq cover?

GHSA-h4wv-8vxr-jgjq covers the following CVE IDs: CVE-2018-7162. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h4wv-8vxr-jgjq?

GHSA-h4wv-8vxr-jgjq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-h4wv-8vxr-jgjqHighCVSS 7.5

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can...

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 9, 2026

🔗 CVE IDs covered (1)

CVE-2018-7162 →

📋 Description

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-7162
https://security.gentoo.org/glsa/202003-48
http://www.securityfocus.com/bid/104468
https://nodejs.org/en/blog/vulnerability/june-2018-security-releases
https://github.com/advisories/GHSA-h4wv-8vxr-jgjq