Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-16119

Опубликовано: 07 июн. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:fresh_project:fresh:*:*:*:*:*:node.js:*:*
Версия до 0.5.2 (исключая)

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

CVSS3: 7.5
redhat
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

CVSS3: 7.5
debian
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response f ...

CVSS3: 7.5
github
больше 7 лет назад

Regular Expression Denial of Service in fresh

EPSS

Процентиль: 55%
0.00328
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-400