CVE-2020-8251

HIGH

Node.js < 14.11.0 - DoS

Title source: llm

Description

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

Scores

CVSS v3 7.5
EPSS 0.0499
EPSS Percentile 89.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-400
Status published

Affected Products (2)

nodejs/node.js < 14.11.0
fedoraproject/fedora

Timeline

Published Sep 18, 2020
Tracked Since Feb 18, 2026