← Vulnerability feed

Vulnerability record · CVE-2016-7099 · published 10 October 2016

CVE-2016-7099: Nodejs node.js vulnerability

Nodejs · Node.Js

The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

5.9 CVSS 3.0 Medium EPSS 2.8% · top 13.1% CWE-19 · CWE-19
5.9CVSS 3.0 base score, v2 4.3
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0002.html
http://www.securityfocus.com/bid/93191 Third Party AdvisoryVDB Entry
https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b Issue TrackingPatch
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ PatchVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0002.html
http://www.securityfocus.com/bid/93191 Third Party AdvisoryVDB Entry
https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b Issue TrackingPatch
https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ PatchVendor Advisory

Track CVE-2016-7099 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.2CVE-2026-111497Google brotli unchecked return value vulnerabilityA buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…KEVEPSS 83%8.8CVE-2009-3953Adobe Reader and Acrobat U3D Out-of-Bounds Write Code ExecutionAdobe Reader and Acrobat fail to properly validate U3D data in PDF documents, causing an out-of-bounds write in the CLODProgressiveMeshDeclaration ha…KEVEPSS 83%analysed7.8CVE-2011-0609Adobe Flash Player and Reader/AIR unspecified code execution via crafted SWFAn unspecified vulnerability in Adobe Flash Player, Adobe AIR, and the Authplay.dll component of Adobe Reader and Acrobat allows remote attackers to …KEVEPSS 64%analysed7.8CVE-2010-1297Adobe Flash Player, AIR, Reader and Acrobat memory corruption via crafted SWFAdobe Flash Player, AIR, Reader and Acrobat contain an out-of-bounds write (CWE-787) in the ActionScript Virtual Machine 2 newfunction instruction, r…KEVEPSS 83%analysed7.8CVE-2009-4324Adobe Reader and Acrobat Doc.media.newPlayer use-after-free code executionAdobe Reader and Acrobat 9.x before 9.3 and 8.x before 8.2 on Windows and Mac OS X contain a use-after-free in the Doc.media.newPlayer method in Mult…KEVEPSS 82%analysed7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed10.0CVE-2026-21636Nodejs node.js improper access control vulnerabilityA flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enabled. Even …EPSS 0.87%10.0CVE-2015-0278Fedoraproject fedora vulnerabilitylibuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.EPSS 3.2%

Source: NIST National Vulnerability Database (record CVE-2016-7099), CISA KEV, FIRST EPSS (scores of 2026-11-14). This page is refreshed as NVD updates the record.