SECUFOCUSNOW
Home›CVE index›CVE-2025-59465
Review reviewHigh

CVE-2025-59465

nodejs node, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: ``` server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ```

CVSS
7.5
EPSS
3.62%
88.4% percentile
CISA KEV
Not listed
Published
2026.01.21
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability3.62%
Technical severityCVSS 7.5

Vulnerability overview

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: ``` server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ```

Affected product and versions

Product
nodejs node, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support
Affected versions
>= 20.19.6 <= 20.19.6, >= 22.21.1 <= 22.21.1, >= 24.12.0 <= 24.12.0, >= 25.2.1 <= 25.2.1, >= 4.0 < 4.*, >= 5.0 < 5.*, >= 6.0 < 6.*, >= 7.0 < 7.*, >= 8.0 < 8.*, >= 9.0 < 9.*, >= 10.0 < 10.*, >= 11.0 < 11.*, >= 12.0 < 12.*, >= 13.0 < 13.*, >= 14.0 < 14.*, >= 15.0 < 15.*, >= 16.0 < 16.*, >= 17.0 < 17.*, >= 18.0 < 18.*, >= 20.0.0 < 20.20.0
Fixed versions
20.20.0, 22.22.0, 24.13.0, 25.3.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that nodejs node, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
CWE-248, CWE-400