CVE-2013-4450: Input Validation
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4450?
CVE-2013-4450 is considered a moderate severity vulnerability as it allows denial of service through resource consumption.
How do I fix CVE-2013-4450?
To fix CVE-2013-4450, upgrade Node.js to version 0.10.21 or later for the 0.10.x branch and 0.8.26 or later for the 0.8.x branch.
What systems are affected by CVE-2013-4450?
CVE-2013-4450 affects Node.js versions 0.10.x before 0.10.21 and 0.8.x before 0.8.26.
What type of attack does CVE-2013-4450 enable?
CVE-2013-4450 enables remote attackers to conduct denial of service attacks by sending many pipelined requests.
Is my Node.js application vulnerable if I use affected versions listed under CVE-2013-4450?
Yes, if your Node.js application is using any affected version below 0.8.26 or 0.10.21, it is vulnerable to CVE-2013-4450.