CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It may lead to a denial-of-service condition.
CVE
CVE-2019-5739
Severity
HIGH
CVSS
7.5
EPSS
5.05%
Original NVD Description
Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service (DoS) attack vector. Node.js 6.17.0 introduces server.keepAliveTimeout and the 5-second default.
Related CVEs
Other vulnerabilities affecting the same vendor(s)