参照: Official debian advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-16014 unimportant priority: Debian including 1 source packages (node-http-proxy), 4 status rows across 4 suites (bookworm, forky, sid, trixie): resolved 4.
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.