Описание
Denial of Service in memjs
Versions of memjs prior to 1.2.2 are vulnerable to Denial of Service (DoS). The package fails to sanitize the value option passed to the Buffer constructor, which may allow attackers to pass large values exhausting system resources.
Recommendation
Upgrade to version 1.2.2 or later.
Пакеты
Наименование
memjs
npm
Затронутые версииВерсия исправления
<= 1.2.0
Отсутствует
Связанные уязвимости
CVSS3: 9.1
nvd
больше 7 лет назад
`memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.