Node.js — V8 Memory Corruption and Stack Overflow (fixed in Node v0.8.28 and v0.10.30)

V8 Memory Corruption and Stack Overflow (fixed in Node v0.8.28 and v0.10.30) A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10. In certain circumstances, a particularly deep recursive workload that may trigger a GC and receive an interrupt may overflow the stack and result in a segmentation fault. For i

[efcl]

Node 0.10.xと0.8.xのsecurity fix.

[yosuke_furukawa]

Node.jsのv0.10, v0.8にセキュリティissueがあるため、アップグレードを推奨しています。再帰呼び出しを何度も行うとDoSにつながる危険性があるとのこと。