← volver
CVE-2017-15010

CVE-2017-15010

EPSS 3.3%
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://access.redhat.com/errata/RHSA-2017:2912https://access.redhat.com/errata/RHSA-2017:2913https://access.redhat.com/errata/RHSA-2018:1263https://access.redhat.com/errata/RHSA-2018:1264https://github.com/salesforce/tough-cookie/issues/92https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/https://nodesecurity.io/advisories/525https://snyk.io/vuln/npm:tough-cookie:20170905http://www.securityfocus.com/bid/101185