CVE-2014-5256
EPSS 1.3%發布日:2014/9/5修改日:2026/4/28
也稱為:DEBIAN-CVE-2014-5256
描述
Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service (memory corruption and application crash) via deep JSON objects whose parsing lets this interrupt mask an overflow of the program stack.
受影響套件(1)
- Debian/nodejsfrom 0, < 0.10.38~dfsg-1