CVE-2015-9241

Publication date

2018-05-29 20:00:00

Family

hackerone

State

PUBLISHED

Description

Certain input passed into the If-Modified-Since or Last-Modified headers will cause an illegal access exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until timed out (default node timeout is 2 minutes).