CVE-2014-3742 File Descriptor Leak Can Cause DoS Vulnerability in hapi
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm hapi(npm) | >= 2.0.0, < 2.2.0 | 2.2.0 |
| spumko project hapi server framework | = 2.0.0 | No fix listed |
| spumko project hapi server framework | = 2.0.0-preview | No fix listed |
| spumko project hapi server framework | = 2.1.1 | No fix listed |
| spumko project hapi server framework | = 2.1.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com
- github.com
- www.npmjs.com
- [oss-security] 20140513 CVE request: various NodeJS module vulnerabilities mailing-list
- [oss-security] 20140514 Re: CVE request: various NodeJS module vulnerabilities mailing-list
- nodesecurity.io vendor-advisory