← back
CVE-2017-15010

CVE-2017-15010

EPSS 3.3%
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/errata/RHSA-2017:2912https://access.redhat.com/errata/RHSA-2017:2913https://access.redhat.com/errata/RHSA-2018:1263https://access.redhat.com/errata/RHSA-2018:1264https://github.com/salesforce/tough-cookie/issues/92https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/https://nodesecurity.io/advisories/525https://snyk.io/vuln/npm:tough-cookie:20170905http://www.securityfocus.com/bid/101185