CVE-2016-2086: Input Validation
First published: Thu Apr 07 2016(Updated: )
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nodejs Node.js | =0.10.0 | |
| Nodejs Node.js | =0.10.1 | |
| Nodejs Node.js | =0.10.2 | |
| Nodejs Node.js | =0.10.3 | |
| Nodejs Node.js | =0.10.4 | |
| Nodejs Node.js | =0.10.5 | |
| Nodejs Node.js | =0.10.6 | |
| Nodejs Node.js | =0.10.7 | |
| Nodejs Node.js | =0.10.8 | |
| Nodejs Node.js | =0.10.9 | |
| Nodejs Node.js | =0.10.10 | |
| Nodejs Node.js | =0.10.11 | |
| Nodejs Node.js | =0.10.12 | |
| Nodejs Node.js | =0.10.13 | |
| Nodejs Node.js | =0.10.14 | |
| Nodejs Node.js | =0.10.15 | |
| Nodejs Node.js | =0.10.16 | |
| Nodejs Node.js | =0.10.16-isaacs-manual | |
| Nodejs Node.js | =0.10.17 | |
| Nodejs Node.js | =0.10.18 | |
| Nodejs Node.js | =0.10.19 | |
| Nodejs Node.js | =0.10.20 | |
| Nodejs Node.js | =0.10.21 | |
| Nodejs Node.js | =0.10.22 | |
| Nodejs Node.js | =0.10.23 | |
| Nodejs Node.js | =0.10.24 | |
| Nodejs Node.js | =0.10.25 | |
| Nodejs Node.js | =0.10.26 | |
| Nodejs Node.js | =0.10.27 | |
| Nodejs Node.js | =0.10.28 | |
| Nodejs Node.js | =0.10.29 | |
| Nodejs Node.js | =0.10.30 | |
| Nodejs Node.js | =0.10.31 | |
| Nodejs Node.js | =0.10.32 | |
| Nodejs Node.js | =0.10.33 | |
| Nodejs Node.js | =0.10.34 | |
| Nodejs Node.js | =0.10.35 | |
| Nodejs Node.js | =0.10.36 | |
| Nodejs Node.js | =0.10.37 | |
| Nodejs Node.js | =0.10.38 | |
| Nodejs Node.js | =0.10.39 | |
| Nodejs Node.js | =0.10.40 | |
| Nodejs Node.js | =0.10.41 | |
| Nodejs Node.js | =0.12.0 | |
| Nodejs Node.js | =0.12.1 | |
| Nodejs Node.js | =0.12.2 | |
| Nodejs Node.js | =0.12.3 | |
| Nodejs Node.js | =0.12.4 | |
| Nodejs Node.js | =0.12.5 | |
| Nodejs Node.js | =0.12.6 | |
| Nodejs Node.js | =0.12.7 | |
| Nodejs Node.js | =0.12.8 | |
| Nodejs Node.js | =0.12.9 | |
| Nodejs Node.js | =4.0.0 | |
| Nodejs Node.js | =4.1.0 | |
| Nodejs Node.js | =4.1.1 | |
| Nodejs Node.js | =4.1.2 | |
| Nodejs Node.js | =4.2.0 | |
| Nodejs Node.js | =4.2.1 | |
| Nodejs Node.js | =4.2.2 | |
| Nodejs Node.js | =4.2.3 | |
| Nodejs Node.js | =4.2.4 | |
| Nodejs Node.js | =4.2.5 | |
| Nodejs Node.js | =4.2.6 | |
| Nodejs Node.js | =5.0.0 | |
| Nodejs Node.js | =5.1.0 | |
| Nodejs Node.js | =5.1.1 | |
| Nodejs Node.js | =5.2.0 | |
| Nodejs Node.js | =5.3.0 | |
| Nodejs Node.js | =5.4.0 | |
| Nodejs Node.js | =5.4.1 | |
| Nodejs Node.js | =5.5.0 | |
| Fedoraproject Fedora | =22 | |
| Fedoraproject Fedora | =23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177673.html
- http://www.securityfocus.com/bid/83282
- https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/
- https://security.gentoo.org/glsa/201612-43
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/tags
- agent/references
- agent/description
- agent/severity
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/nodejs
- canonical/nodejs node.js
- version/nodejs node.js/0.10.0
- version/nodejs node.js/0.10.1
- version/nodejs node.js/0.10.2
- version/nodejs node.js/0.10.3
- version/nodejs node.js/0.10.4
- version/nodejs node.js/0.10.5
- version/nodejs node.js/0.10.6
- version/nodejs node.js/0.10.7
- version/nodejs node.js/0.10.8
- version/nodejs node.js/0.10.9
- version/nodejs node.js/0.10.10
- version/nodejs node.js/0.10.11
- version/nodejs node.js/0.10.12
- version/nodejs node.js/0.10.13
- version/nodejs node.js/0.10.14
- version/nodejs node.js/0.10.15
- version/nodejs node.js/0.10.16
- version/nodejs node.js/0.10.16-isaacs-manual
- version/nodejs node.js/0.10.17
- version/nodejs node.js/0.10.18
- version/nodejs node.js/0.10.19
- version/nodejs node.js/0.10.20
- version/nodejs node.js/0.10.21
- version/nodejs node.js/0.10.22
- version/nodejs node.js/0.10.23
- version/nodejs node.js/0.10.24
- version/nodejs node.js/0.10.25
- version/nodejs node.js/0.10.26
- version/nodejs node.js/0.10.27
- version/nodejs node.js/0.10.28
- version/nodejs node.js/0.10.29
- version/nodejs node.js/0.10.30
- version/nodejs node.js/0.10.31
- version/nodejs node.js/0.10.32
- version/nodejs node.js/0.10.33
- version/nodejs node.js/0.10.34
- version/nodejs node.js/0.10.35
- version/nodejs node.js/0.10.36
- version/nodejs node.js/0.10.37
- version/nodejs node.js/0.10.38
- version/nodejs node.js/0.10.39
- version/nodejs node.js/0.10.40
- version/nodejs node.js/0.10.41
- version/nodejs node.js/0.12.0
- version/nodejs node.js/0.12.1
- version/nodejs node.js/0.12.2
- version/nodejs node.js/0.12.3
- version/nodejs node.js/0.12.4
- version/nodejs node.js/0.12.5
- version/nodejs node.js/0.12.6
- version/nodejs node.js/0.12.7
- version/nodejs node.js/0.12.8
- version/nodejs node.js/0.12.9
- version/nodejs node.js/4.0.0
- version/nodejs node.js/4.1.0
- version/nodejs node.js/4.1.1
- version/nodejs node.js/4.1.2
- version/nodejs node.js/4.2.0
- version/nodejs node.js/4.2.1
- version/nodejs node.js/4.2.2
- version/nodejs node.js/4.2.3
- version/nodejs node.js/4.2.4
- version/nodejs node.js/4.2.5
- version/nodejs node.js/4.2.6
- version/nodejs node.js/5.0.0
- version/nodejs node.js/5.1.0
- version/nodejs node.js/5.1.1
- version/nodejs node.js/5.2.0
- version/nodejs node.js/5.3.0
- version/nodejs node.js/5.4.0
- version/nodejs node.js/5.4.1
- version/nodejs node.js/5.5.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/22
- version/fedoraproject fedora/23