Описание
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-http-proxy | not-affected | package |
Примечания
https://nodesecurity.io/advisories/323
https://github.com/nodejitsu/node-http-proxy/pull/101
https://github.com/http-party/node-http-proxy/commit/07c8d2ee6017264c3d4deac9f42ca264a3740b48 (v0.7.0)
Связанные уязвимости
CVSS3: 7.5
redhat
почти 9 лет назад
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
CVSS3: 7.5
nvd
больше 7 лет назад
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
