Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-4450.
PoCs published by Marek Majkowski, titanous, joev, including Metasploit module auxiliary/dos/http/nodejs_pipelining.
AI-analyzed exploit summary This Metasploit module exploits a Denial of Service (DoS) vulnerability in Node.js HTTP parser by sending pipelined HTTP requests to trigger unbounded memory allocation. It targets versions before 0.10.21 and 0.8.26.
Description
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
Exploits (1)
This Metasploit module exploits a Denial of Service (DoS) vulnerability in Node.js HTTP parser by sending pipelined HTTP requests to trigger unbounded memory allocation. It targets versions before 0.10.21 and 0.8.26.