CVE-2018-1109

🗓️ 30 Mar 2021 01:52:55Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 20 Views

Vulnerability in Braces 2.3.

Reporter	Title	Published	Views	Family All 19
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js braces and netmask module affects IBM Cloud Automation Manager	19 May 202117:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js braces and netmask module affects IBM Cloud Pak for Multicloud Management Managed Service	19 May 202117:08	–	ibm
BDU FSTEC	The vulnerability of the Braces package in the npm package manager allows a hacker to trigger a service failure.	4 Jun 202100:00	–	bdu_fstec
CNNVD	npm Braces 资源管理错误漏洞	29 Mar 202100:00	–	cnnvd
CNVD	Npm Braces Resource Management Error Vulnerability	14 Apr 202100:00	–	cnvd
CVE	CVE-2018-1109	30 Mar 202101:52	–	cve
Cvelist	CVE-2018-1109	30 Mar 202101:52	–	cvelist
EUVD	EUVD-2022-0569	3 Oct 202520:07	–	euvd
Github Security Blog	Regular Expression Denial of Service (ReDoS) in braces	6 Jan 202220:42	–	github

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	node-braces	0	node-braces_0_any.deb
Debian	12	any	node-braces	0	node-braces_0_any.deb
Debian	13	any	node-braces	0	node-braces_0_any.deb
Debian	14	any	node-braces	0	node-braces_0_any.deb
Debian	999	any	node-braces	0	node-braces_0_any.deb

30 Mar 2021 01:52Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 3.15.3

EPSS0.01363

braces regular expression denial of service unix