Riskcovery

CVE-2017-15896

State
Published
Severity
Not scored
Published
Dec 11, 2017
Updated
Sep 16, 2024
Reserved
Oct 25, 2017

Read the record on cve.org

Description

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Node.jsThe Node.js Project
  • 4.0.0 and higherAffected
  • 6.0.0 and higherAffected
  • 8.0.0 and higherAffected
  • 9.0.0 and higherAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.