CVE-2016-4055

🗓️ 23 Jan 2017 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 215 Views

The moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service via a long string

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE) (CVE-2017-18214, CVE-2016-4055, CVE-2021-20413)	25 Jun 202109:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in moment.js affect IBM Storage Scale	8 May 202407:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is vulnerable to a denial of service vulnerability in Angular.js	8 Jul 202120:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in moment.js used by IBM Jazz Reporting Service (JRS) (CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2022-31129)	8 Jan 202507:10	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in moment.js used by IBM Jazz Reporting Service (CVE-2022-24785)	4 Oct 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22968, CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2018-1000613, CVE-2020-15522, CVE-2018-1000180, CVE-2020-26939, CVE-2022-22314)	26 Mar 202502:11	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple security vulnerabilities in Apache Storm used by IBM Tivoli Netcool Manager.	21 Jul 202204:32	–	ibm
CNNVD	IBM Guardium 处理逻辑错误漏洞	25 Jun 202100:00	–	cnnvd
CNVD	Joyent Node.js moment denial of service vulnerability	24 Apr 201600:00	–	cnvd
Cvelist	CVE-2016-4055	23 Jan 201721:00	–	cvelist

NVD

Node

momentjs momentRange<2.11.2node.js

Node

tenable nessusRange≤8.2.3

Node

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/04/20/11
lists	www.lists.apache.org/thread.html/54df3aeb4239b64b50b356f0ca6f986e3c4ca5b84c515dce077c7854%40%3Cuser.flink.apache.org%3E
tenable	www.tenable.com/security/tns-2019-02
lists	www.lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2%40%3Cuser.flink.apache.org%3E
securityfocus	www.securityfocus.com/bid/95849
nodesecurity	www.nodesecurity.io/advisories/55
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
lists	www.lists.apache.org/thread.html/17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49%40%3Cuser.flink.apache.org%3E
lists	www.lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731%40%3Cdev.flink.apache.org%3E

13 May 2026 00:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

CVSS 27.8

EPSS0.02708