CVE-2018-7158

🗓️ 17 May 2018 14:00:00Reported by nodejsType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 99 Views

`Node.js 4.x 'path' module ReDoS vulnerability

Reporter	Title	Published	Views	Family All 83
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple Node.js vulnerabilities	13 Nov 201815:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)	31 Oct 201820:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private and IBM Cloud Private Cloud Foundry (CVE-2018-7158, CVE-2018-7159, CVE-2018-7160)	14 Sep 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM® SDK for Node.js™ affect IBM® SDK for Node.js™ in IBM Cloud (CVE-2018-7158, CVE-2018-7159, CVE-2018-7160)	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)	15 Sep 202219:20	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used in IBM QRadar Packet Capture is susceptible to multiple vulnerabilities	7 Nov 201815:25	–	ibm
FreeBSD	node.js -- multiple vulnerabilities	21 Mar 201800:00	–	freebsd
AlpineLinux	CVE-2018-7158	17 May 201814:00	–	alpinelinux
CNVD	Node.js Denial of Service Vulnerability (CNVD-2018-14713)	7 Jun 201800:00	–	cnvd

NVD

Node

nodejs node.jsRange4.0.0–4.1.2-

nodejs node.jsRange4.2.0–4.9.1lts

[
  {
    "product": "Node.js",
    "vendor": "The Node.js Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.x"
      }
    ]
  }
]

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/march-2018-security-releases/

21 Nov 2024 04:11Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5

EPSS0.01264

CWE-185