CVE-2023-31125 Uncaught exception in engine.io

🗓️ 08 May 2023 20:21:01Reported by GitHub_MType

Uncaught exception in Engine.IO server can cause Node.js process termination, impacting Socket.IO user

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	5 Jul 202318:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 May 202314:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.11 and earlier	20 Jun 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is vulnerable to Engine.IO denial of service (CVE-2023-31125)	8 Sep 202308:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2023-31125]	1 Jun 202314:39	–	ibm
Circl	CVE-2023-31125	9 May 202300:47	–	circl
CNNVD	Engine.IO 安全漏洞	8 May 202300:00	–	cnnvd
CVE	CVE-2023-31125	8 May 202320:21	–	cve
EUVD	EUVD-2023-1610	3 Oct 202520:07	–	euvd
Tenable Nessus	Fedora 39 : magicmirror (2023-3a06c965b4)	7 Nov 202300:00	–	nessus

[
  {
    "vendor": "socketio",
    "product": "engine.io",
    "versions": [
      {
        "version": ">= 5.1.0, < 6.4.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20230622-0002/
github	www.github.com/socketio/engine.io/releases/tag/6.4.2
github	www.github.com/socketio/engine.io/security/advisories/GHSA-q9mw-68c2-j6m5
github	www.github.com/socketio/engine.io/commit/fc480b4f305e16fe5972cf337d055e598372dc44

22 Jun 2023 14:06Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.01327

CWE-248