CVE-2017-16138

Опубликовано: 07 июн. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Ссылки

https://github.com/broofa/node-mime/issues/167
Exploit
Third Party Advisory
https://nodesecurity.io/advisories/535
Third Party Advisory
https://github.com/broofa/node-mime/issues/167
Exploit
Third Party Advisory
https://nodesecurity.io/advisories/535
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mime_project:mime:*:*:*:*:*:node.js:*:*

Версия до 1.4.1 (исключая)

cpe:2.3:a:mime_project:mime:*:*:*:*:*:node.js:*:*

Версия от 2.0.1 (включая) до 2.0.3 (исключая)

EPSS

Процентиль: 62%

0.00433

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2017-16138

CVSS3: 7.5

ubuntu

больше 7 лет назад

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

CVE-2017-16138

CVSS3: 5.3

redhat

больше 8 лет назад

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

CVE-2017-16138

CVSS3: 7.5

debian

больше 7 лет назад

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular express ...

GHSA-wrvr-8mpx-r7pp

CVSS3: 7.5

github

больше 7 лет назад

mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

EPSS

Процентиль: 62%

0.00433

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400