CVE-2016-10641
UnknownEPSS 0.58%
Last modified
CVE-2016-10641 is a vulnerability of currently unknown severity. node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Node-Bsdiff-Android Project | Node-Bsdiff-Android | <= 0.1.5 |
References
- https://nodesecurity.io/advisories/234Third Party Advisory
- https://nodesecurity.io/advisories/234Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-10641?
node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
How severe is CVE-2016-10641?
Severity scoring for CVE-2016-10641 is pending analysis. The EPSS model estimates a 0.58% probability of exploitation in the next 30 days.
How do I fix CVE-2016-10641?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-10636grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-cc…
- CVE-2016-10637haxe-dev is a cross-platform toolkit. haxe-dev downloads bin…
- CVE-2016-10638js-given is a JavaScript frontend to jgiven. js-given downlo…
- CVE-2016-10639redis-srvr is a npm wrapper for redis-server. redis-srvr dow…
- CVE-2016-1064Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
- CVE-2016-10640node-thulac is a node binding for thulac. node-thulac downlo…
- CVE-2016-10642cmake installs the cmake x86 linux binaries. cmake downloads…
- CVE-2016-10643jstestdriver is a wrapper for Google's jstestdriver. jstestd…
- CVE-2016-10644slimerjs-edge is a npm wrapper for installing the bleeding e…
- CVE-2016-10645grunt-images is a grunt plugin for processing images. grunt-…
- CVE-2016-10646resourcehacker is a Node wrapper of Resource Hacker (windows…
- CVE-2016-10647node-air-sdk is an AIR SDK for nodejs. node-air-sdk download…
Are you affected by CVE-2016-10641?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST