CVE-2016-10542

Опубликовано: 31 мая 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

Ссылки

https://github.com/nodejs/node/issues/7388
Issue Tracking
Third Party Advisory
https://nodesecurity.io/advisories/120
Third Party Advisory
https://github.com/nodejs/node/issues/7388
Issue Tracking
Third Party Advisory
https://nodesecurity.io/advisories/120
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*

Версия до 1.1.0 (включая)

EPSS

Процентиль: 98%

0.66075

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

CWE-20

Связанные уязвимости

CVE-2016-10542

CVSS3: 7.5

ubuntu

больше 7 лет назад

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

CVE-2016-10542

CVSS3: 7.5

debian

больше 7 лет назад

ws is a "simple to use, blazing fast and thoroughly tested websocket c ...

GHSA-6663-c963-2gqg

github

почти 7 лет назад

DoS due to excessively large websocket message in ws

EPSS

Процентиль: 98%

0.66075

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

CWE-20