✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – CVE-2020-5666 – ICS:Mitsubishi Electric MELSEC iQ-R Series Denial of Service Vulnerability

November 16, 2020
Rewterz

Rewterz Threat Advisory – Multiple RCE Flaws in Cisco Security Manager

November 17, 2020

Rewterz Threat Advisory – CVE-2020-8277 – Node.js Denial of Service Vulnerability

Severity

Medium

Analysis Summary

CVE-2020-8277

Node.js is vulnerable to a denial of service. By getting the application to resolve a DNS record with a larger number of responses, an attacker could exploit this vulnerability to trigger a DNS request for a host of their choice resulting in a denial of service.

Impact

Denial of service

Affected Vendors

NodeJs

Affected Products

  • Upgrade to the latest version of Node.js (12.19.1
  • 14.15.1 or 15.2.1 or later)
  • Node.js Node.js 12
  • Node.js Node.js 14.0
  • Node.js Node.js 15.0

Remediation

Upgrade to the latest version of Node.js (12.19.1, 14.15.1 or 15.2.1 or later).

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo