Linux · Security advisory · November 14, 2019

ELSA-2019-3497: http-parser security update

ELSA-2019-3497, released November 14, 2019, fixes 1 CVE in http-parser (version 0:2.8.0-5.el8). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1021
95th percentile

Fixed package versions

ProductReleaseFixed in
http-parserol 80:2.8.0-5.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2018-12121 Node.js 6 and 1 other: Uncontrolled Resource Consumption / Denial of Service 7.5 0.1021 None reported
Showing 1 to 1 of 1 1