Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-5325

CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.

Published

2016-10-10T16:59:00.200

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-113
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nodejs node.js 4.0.0 Yes
Application nodejs node.js 4.1.0 Yes
Application nodejs node.js 4.1.1 Yes
Application nodejs node.js 4.1.2 Yes
Application nodejs node.js 4.2.0 Yes
Application nodejs node.js 4.2.1 Yes
Application nodejs node.js 4.2.2 Yes
Application nodejs node.js 4.2.3 Yes
Application nodejs node.js 4.2.4 Yes
Application nodejs node.js 4.2.5 Yes
Application nodejs node.js 4.2.6 Yes
Application nodejs node.js 4.3.0 Yes
Application nodejs node.js 4.3.1 Yes
Application nodejs node.js 4.3.2 Yes
Application nodejs node.js 4.4.0 Yes
Application nodejs node.js 4.4.1 Yes
Application nodejs node.js 4.4.2 Yes
Application nodejs node.js 4.4.3 Yes
Application nodejs node.js 4.4.4 Yes
Application nodejs node.js 4.4.5 Yes
Application nodejs node.js 4.4.6 Yes
Application nodejs node.js 4.4.7 Yes
Application nodejs node.js 4.5.0 Yes
Application nodejs node.js 0.10.0 Yes
Application nodejs node.js 0.10.1 Yes
Application nodejs node.js 0.10.2 Yes
Application nodejs node.js 0.10.3 Yes
Application nodejs node.js 0.10.4 Yes
Application nodejs node.js 0.10.5 Yes
Application nodejs node.js 0.10.6 Yes
Application nodejs node.js 0.10.7 Yes
Application nodejs node.js 0.10.8 Yes
Application nodejs node.js 0.10.9 Yes
Application nodejs node.js 0.10.10 Yes
Application nodejs node.js 0.10.11 Yes
Application nodejs node.js 0.10.12 Yes
Application nodejs node.js 0.10.13 Yes
Application nodejs node.js 0.10.14 Yes
Application nodejs node.js 0.10.15 Yes
Application nodejs node.js 0.10.16 Yes
Application nodejs node.js 0.10.16-isaacs-manual Yes
Application nodejs node.js 0.10.17 Yes
Application nodejs node.js 0.10.18 Yes
Application nodejs node.js 0.10.19 Yes
Application nodejs node.js 0.10.20 Yes
Application nodejs node.js 0.10.21 Yes
Application nodejs node.js 0.10.22 Yes
Application nodejs node.js 0.10.23 Yes
Application nodejs node.js 0.10.24 Yes
Application nodejs node.js 0.10.25 Yes
Application nodejs node.js 0.10.26 Yes
Application nodejs node.js 0.10.27 Yes
Application nodejs node.js 0.10.28 Yes
Application nodejs node.js 0.10.29 Yes
Application nodejs node.js 0.10.30 Yes
Application nodejs node.js 0.10.31 Yes
Application nodejs node.js 0.10.32 Yes
Application nodejs node.js 0.10.33 Yes
Application nodejs node.js 0.10.34 Yes
Application nodejs node.js 0.10.35 Yes
Application nodejs node.js 0.10.36 Yes
Application nodejs node.js 0.10.37 Yes
Application nodejs node.js 0.10.38 Yes
Application nodejs node.js 0.10.39 Yes
Application nodejs node.js 0.10.40 Yes
Application nodejs node.js 0.10.41 Yes
Application nodejs node.js 0.10.42 Yes
Application nodejs node.js 0.10.43 Yes
Application nodejs node.js 0.10.44 Yes
Application nodejs node.js 0.10.45 Yes
Application nodejs node.js 0.10.46 Yes
Operating System suse linux_enterprise 12.0 Yes
Application nodejs node.js 0.12.0 Yes
Application nodejs node.js 0.12.1 Yes
Application nodejs node.js 0.12.2 Yes
Application nodejs node.js 0.12.3 Yes
Application nodejs node.js 0.12.4 Yes
Application nodejs node.js 0.12.5 Yes
Application nodejs node.js 0.12.6 Yes
Application nodejs node.js 0.12.7 Yes
Application nodejs node.js 0.12.8 Yes
Application nodejs node.js 0.12.9 Yes
Application nodejs node.js 0.12.10 Yes
Application nodejs node.js 0.12.11 Yes
Application nodejs node.js 0.12.12 Yes
Application nodejs node.js 0.12.13 Yes
Application nodejs node.js 0.12.14 Yes
Application nodejs node.js 0.12.15 Yes
Application nodejs node.js 6.0.0 Yes
Application nodejs node.js 6.1.0 Yes
Application nodejs node.js 6.2.0 Yes
Application nodejs node.js 6.2.1 Yes
Application nodejs node.js 6.2.2 Yes
Application nodejs node.js 6.3.0 Yes
Application nodejs node.js 6.3.1 Yes
Application nodejs node.js 6.4.0 Yes
Application nodejs node.js 6.5.0 Yes
Application nodejs node.js 6.6.0 Yes
References