CVE-2016-2086
N/A
Published: April 7, 2016 at 09:00 PM UTC
Updated: June 17, 2026 at 12:43 AM UTC
2 products affected across 2 vendorsFedoraNode.js
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
0.10.00.10.10.10.100.10.110.10.120.10.130.10.140.10.150.10.160.10.16-isaacs-manual0.10.170.10.180.10.190.10.20.10.200.10.210.10.220.10.230.10.240.10.250.10.260.10.270.10.280.10.290.10.30.10.300.10.310.10.320.10.330.10.340.10.350.10.360.10.370.10.380.10.390.10.40.10.400.10.410.10.50.10.60.10.70.10.80.10.90.12.00.12.10.12.20.12.30.12.40.12.50.12.60.12.70.12.80.12.94.0.04.1.04.1.14.1.24.2.04.2.14.2.24.2.34.2.44.2.54.2.65.0.05.1.05.1.15.2.05.3.05.4.05.4.15.5.0
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (5)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177673.htmlx_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
https://security.gentoo.org/glsa/201612-43Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card