Описание
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.
Меры по смягчению последствий
There is no mitigation for this issue, the flaw can only be resolved by applying updates.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Container Platform 4 | openshift4/ose-prometheus | Fix deferred |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1856371npmjs-sockjs: incorrect handling of upgrade header with the value websocket leads to DoS
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.3
nvd
больше 5 лет назад
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.
CVSS3: 5.3
debian
больше 5 лет назад
Incorrect handling of Upgrade header with the value websocket leads in ...
5.3 Medium
CVSS3