CVE:CVE-2016-1000232
CNNVD:CNNVD-201611-045
NodeJS Tough-Cookie是一款用于Node.js的RFC6265（HTTP状态管理协议）Cookies。
NodeJS Tough-Cookie 2.2.2版本中HTTP请求Cookie Header的解析过程存在安全漏洞。攻击者可借助Custom HTTP包头利用该漏洞造成拒绝服务（CPU资源耗尽）
solution:Upgrade salesforce tough-cookie to a higher version than 2.2.2,and avoid the version [0.9.7,2.2.2]; Upgrade ibm api_connect to a higher version than 5.0.6.5,5.0.7.2,5.0.8.0,and avoid the version [5.0.6.0,5.0.6.5],[5.0.7.0,5.0.7.2],5.0.8.0; Upgrade redhat openshift_container_platform to a higher version than 3.1,3.2,3.3,and avoid the version 3.1,3.2,3.3