Red Hat Bugzilla – Bug 1475327
CVE-2017-11499 nodejs: Constant Hashtable Seeds vulnerability
Last modified: 2017-10-18 03:51:45 EDT
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
Created nodejs tracking bugs for this issue:
Affects: epel-all [bug 1475330]
Affects: fedora-all [bug 1475328]
Affects: openshift-1 [bug 1475329]
Lowering severity to Medium to keep it aligned with similar remote DoS by hash table issues.
The upstream fix pointed in the upstream release note (commit 51d69d2bec) was a temporary fix only, aimed at disabling snapshot by default, and had a negative performance impact during creation of contexts (e.g.: vm.runInNewContext() calls).
A later patch re-enables snapshot by default, and adds re-hashing after de-serialization as mitigation : https://github.com/nodejs/node/commit/8dce05fa
This issue has been addressed in the following products:
Red Hat Software Collections for Red Hat Enterprise Linux 6
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS
Red Hat Software Collections for Red Hat Enterprise Linux 7
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS
Via RHSA-2017:2908 https://access.redhat.com/errata/RHSA-2017:2908