Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
2017-07-25T13:29:00.177
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | nodejs | node.js | 4.0.0 | Yes |
| Application | nodejs | node.js | 4.1.0 | Yes |
| Application | nodejs | node.js | 4.1.1 | Yes |
| Application | nodejs | node.js | 4.1.2 | Yes |
| Application | nodejs | node.js | 4.2.0 | Yes |
| Application | nodejs | node.js | 4.2.1 | Yes |
| Application | nodejs | node.js | 4.2.2 | Yes |
| Application | nodejs | node.js | 4.2.3 | Yes |
| Application | nodejs | node.js | 4.2.4 | Yes |
| Application | nodejs | node.js | 4.2.5 | Yes |
| Application | nodejs | node.js | 4.2.6 | Yes |
| Application | nodejs | node.js | 4.3.0 | Yes |
| Application | nodejs | node.js | 4.3.1 | Yes |
| Application | nodejs | node.js | 4.3.2 | Yes |
| Application | nodejs | node.js | 4.4.0 | Yes |
| Application | nodejs | node.js | 4.4.1 | Yes |
| Application | nodejs | node.js | 4.4.2 | Yes |
| Application | nodejs | node.js | 4.4.3 | Yes |
| Application | nodejs | node.js | 4.4.4 | Yes |
| Application | nodejs | node.js | 4.4.5 | Yes |
| Application | nodejs | node.js | 4.4.6 | Yes |
| Application | nodejs | node.js | 4.4.7 | Yes |
| Application | nodejs | node.js | 4.5.0 | Yes |
| Application | nodejs | node.js | 4.6.0 | Yes |
| Application | nodejs | node.js | 4.6.1 | Yes |
| Application | nodejs | node.js | 4.6.2 | Yes |
| Application | nodejs | node.js | 4.7.0 | Yes |
| Application | nodejs | node.js | 4.7.1 | Yes |
| Application | nodejs | node.js | 4.7.2 | Yes |
| Application | nodejs | node.js | 4.7.3 | Yes |
| Application | nodejs | node.js | 4.8.0 | Yes |
| Application | nodejs | node.js | 4.8.1 | Yes |
| Application | nodejs | node.js | 4.8.2 | Yes |
| Application | nodejs | node.js | 4.8.3 | Yes |
| Application | nodejs | node.js | 5.0.0 | Yes |
| Application | nodejs | node.js | 5.1.0 | Yes |
| Application | nodejs | node.js | 5.1.1 | Yes |
| Application | nodejs | node.js | 5.2.0 | Yes |
| Application | nodejs | node.js | 5.3.0 | Yes |
| Application | nodejs | node.js | 5.4.0 | Yes |
| Application | nodejs | node.js | 5.4.1 | Yes |
| Application | nodejs | node.js | 5.5.0 | Yes |
| Application | nodejs | node.js | 5.6.0 | Yes |
| Application | nodejs | node.js | 5.7.0 | Yes |
| Application | nodejs | node.js | 5.7.1 | Yes |
| Application | nodejs | node.js | 5.8.0 | Yes |
| Application | nodejs | node.js | 5.9.0 | Yes |
| Application | nodejs | node.js | 5.9.1 | Yes |
| Application | nodejs | node.js | 5.10.0 | Yes |
| Application | nodejs | node.js | 5.10.1 | Yes |
| Application | nodejs | node.js | 5.11.0 | Yes |
| Application | nodejs | node.js | 5.11.1 | Yes |
| Application | nodejs | node.js | 5.12.0 | Yes |
| Application | nodejs | node.js | 6.0.0 | Yes |
| Application | nodejs | node.js | 6.1.0 | Yes |
| Application | nodejs | node.js | 6.2.0 | Yes |
| Application | nodejs | node.js | 6.2.1 | Yes |
| Application | nodejs | node.js | 6.2.2 | Yes |
| Application | nodejs | node.js | 6.3.0 | Yes |
| Application | nodejs | node.js | 6.3.1 | Yes |
| Application | nodejs | node.js | 6.4.0 | Yes |
| Application | nodejs | node.js | 6.5.0 | Yes |
| Application | nodejs | node.js | 6.6.0 | Yes |
| Application | nodejs | node.js | 6.7.0 | Yes |
| Application | nodejs | node.js | 6.8.0 | Yes |
| Application | nodejs | node.js | 6.8.1 | Yes |
| Application | nodejs | node.js | 6.9.0 | Yes |
| Application | nodejs | node.js | 6.9.1 | Yes |
| Application | nodejs | node.js | 6.9.2 | Yes |
| Application | nodejs | node.js | 6.9.3 | Yes |
| Application | nodejs | node.js | 6.9.4 | Yes |
| Application | nodejs | node.js | 6.9.5 | Yes |
| Application | nodejs | node.js | 6.10.0 | Yes |
| Application | nodejs | node.js | 6.10.1 | Yes |
| Application | nodejs | node.js | 6.10.2 | Yes |
| Application | nodejs | node.js | 6.10.3 | Yes |
| Application | nodejs | node.js | 6.11.0 | Yes |
| Application | nodejs | node.js | 6.11.1 | Yes |
| Application | nodejs | node.js | 7.0.0 | Yes |
| Application | nodejs | node.js | 7.1.0 | Yes |
| Application | nodejs | node.js | 7.2.0 | Yes |
| Application | nodejs | node.js | 7.2.1 | Yes |
| Application | nodejs | node.js | 7.3.0 | Yes |
| Application | nodejs | node.js | 7.4.0 | Yes |
| Application | nodejs | node.js | 7.5.0 | Yes |
| Application | nodejs | node.js | 7.6.0 | Yes |
| Application | nodejs | node.js | 7.7.0 | Yes |
| Application | nodejs | node.js | 7.7.1 | Yes |
| Application | nodejs | node.js | 7.7.2 | Yes |
| Application | nodejs | node.js | 7.7.3 | Yes |
| Application | nodejs | node.js | 7.7.4 | Yes |
| Application | nodejs | node.js | 7.8.0 | Yes |
| Application | nodejs | node.js | 7.9.0 | Yes |
| Application | nodejs | node.js | 7.10.0 | Yes |
| Application | nodejs | node.js | 7.10.1 | Yes |
| Application | nodejs | node.js | 8.0.0 | Yes |
| Application | nodejs | node.js | 8.1.0 | Yes |
| Application | nodejs | node.js | 8.1.1 | Yes |
| Application | nodejs | node.js | 8.1.2 | Yes |
| Application | nodejs | node.js | 8.1.3 | Yes |