Back to search
CVE-2020-8277
Published: Nov 19, 2020
Modified: Apr 30, 2025
PUBLISHED
Description
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.
| Vendor | Product | Versions |
|---|---|---|
NodeJS | Node | affected 4.0 - < 4.*affected 5.0 - < 5.*affected 6.0 - < 6.*affected 7.0 - < 7.*affected 8.0 - < 8.*+6 more versions |
Weaknesses (CWE)
References
https://hackerone.com/reports/1033107
x_refsource_MISC
https://nodejs.org/en/blog/vulnerability/november-2020-security-releases/
x_refsource_CONFIRM
FEDORA-2020-7473744de1
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-307e873389
vendor-advisory
x_refsource_FEDORA
GLSA-202012-11
vendor-advisory
x_refsource_GENTOO
GLSA-202101-07
vendor-advisory
x_refsource_GENTOO
https://www.oracle.com/security-alerts/cpujan2021.html
x_refsource_MISC
FEDORA-2021-afed2b904e
vendor-advisory
x_refsource_FEDORA
FEDORA-2021-ee913722db
vendor-advisory
x_refsource_FEDORA
https://www.oracle.com/security-alerts/cpuApr2021.html
x_refsource_MISC
https://www.oracle.com//security-alerts/cpujul2021.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2021.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2022.html
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now