Описание
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 3 | nodejs-http-proxy | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-248
https://bugzilla.redhat.com/show_bug.cgi?id=1591872nodejs-http-proxy: DOS via improper error handling in middleware implementation
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
CVSS3: 7.5
debian
больше 7 лет назад
Http-proxy is a proxying library. Because of the way errors are handle ...
7.5 High
CVSS3