Skip to content
This repository has been archived by the owner on Apr 22, 2023. It is now read-only.

[DoS security vulnerability. Original title redacted] #6214

Closed
majek opened this issue Sep 12, 2013 · 4 comments
Closed

[DoS security vulnerability. Original title redacted] #6214

majek opened this issue Sep 12, 2013 · 4 comments
Labels
http

Comments

@majek
Copy link

majek commented Sep 12, 2013

Redacted. (Fixed, but github doesn't have private issues, so responsible disclosure was never really an option.)
@isaacs isaacs closed this as completed in 085dd30 Oct 16, 2013
@fengmk2
Copy link

fengmk2 commented Oct 17, 2013

@isaacs Will you fix this issue on node 0.8?

@isaacs
Copy link

isaacs commented Oct 17, 2013

Yes, this is being back ported to 0.10 and 0.8.

@fengmk2
Copy link

fengmk2 commented Oct 17, 2013

Nice job!
在 2013-10-17 PM12:05，"Isaac Z. Schlueter" [email protected]写道：

Yes, this is being back ported to 0.10 and 0.8.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/6214#issuecomment-26477924
.

This was referenced Oct 19, 2013
Closed
Merged
@majek
Copy link
Author

majek commented Oct 29, 2013

This bug's CVE no': CVE-2013-4450.

@egirshov egirshov mentioned this issue Nov 6, 2013
Closed
isaacs added a commit to isaacs/node-v0.x-archive that referenced this issue Dec 4, 2013
@isaacs
http: provide backpressure for pipeline flood
ca8cbc0 
If a client sends a lot more pipelined requests than we can handle, then
we need to provide backpressure so that the client knows to back off.
Do this by pausing both the stream and the parser itself when the
responses are not being read by the downstream client.

Fix nodejsGH-6214
trentm added a commit to TritonDataCenter/sdcnode that referenced this issue Aug 29, 2014
@trentm
TOOLS-319: sdcnode builds with nodejs/node-v0.x-archive#6214 fix
c0b7779
trentm added a commit to TritonDataCenter/sdcnode that referenced this issue Aug 29, 2014
@trentm
TOOLS-319, TOOLS-317: sdcnode builds for nodejs/node-v0.x-archive#6214
02e53ef 
++v0.10.21-zone (multiarch)
++v0.10.21-zone
++v0.8.26-zone
--v0.8.25-zone

Also drop the pre-patches for nodejs/node-v0.x-archive#6214 in earlier 0.10 and 0.8
versions.  If you need that fix, then upgrade to 0.10.21 or 0.8.26.
trentm added a commit to TritonDataCenter/sdcnode that referenced this issue Aug 29, 2014
@trentm
TOOLS-319, TOOLS-317: sdcnode builds for nodejs/node-v0.x-archive#6214
0a7ec21 
Actually add v0.8.26-zone here (and v0.8.25-zone stays too, it is
needed).

++v0.8.26-zone
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
http
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@isaacs @majek @fengmk2