Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-16119

Опубликовано: 07 июн. 2018
Источник: redhat
CVSS3: 7.5

Описание

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Mobile Application Platform 4nodejs-freshNot affected
Red Hat OpenShift Enterprise 3nodejs-freshNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1588780nodejs-fresh: Regular expression denial of service when parsing crafted user input

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

CVSS3: 7.5
nvd
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

CVSS3: 7.5
debian
больше 7 лет назад

Fresh is a module used by the Express.js framework for HTTP response f ...

CVSS3: 7.5
github
больше 7 лет назад

Regular Expression Denial of Service in fresh

7.5 High

CVSS3