Описание
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Ссылки
- Third Party Advisory
- ExploitIssue TrackingThird Party Advisory
- Product
- Patch
- ExploitVendor Advisory
- ExploitIssue TrackingThird Party Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.0.11 (исключая)
cpe:2.3:a:nodemailer:nodemailer:*:*:*:*:*:node.js:*:*
Конфигурация 2
Одно из
cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:developer_hub:-:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00469
Низкий
7.5 High
CVSS3
Дефекты
CWE-703
Связанные уязвимости
CVSS3: 7.5
ubuntu
8 месяцев назад
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
CVSS3: 7.5
redhat
9 месяцев назад
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
CVSS3: 7.5
debian
8 месяцев назад
A flaw was found in Nodemailer. This vulnerability allows a denial of ...
CVSS3: 7.5
github
9 месяцев назад
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
EPSS
Процентиль: 39%
0.00469
Низкий
7.5 High
CVSS3
Дефекты
CWE-703