Insufficient validation when decoding a Socket.IO packet

🗓️ 23 May 2023 19:55:13Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 78 Views

Insufficient validation when decoding a Socket.IO packet can crash Node.j

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	28 Mar 202415:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, AngularJS, Golang Go, libcURL, PostgreSQL, Linux kernel might affect IBM Spectrum Protect Plus	24 Sep 202405:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2023-32695]	27 Jun 202311:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	5 Jul 202318:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
Circl	CVE-2023-32695	27 May 202322:17	–	circl
CNNVD	Socket.IO 代码问题漏洞	27 May 202300:00	–	cnnvd
CVE	CVE-2023-32695	27 May 202315:44	–	cve
Cvelist	CVE-2023-32695 Insufficient validation when decoding a Socket.IO packet	27 May 202315:44	–	cvelist
Debian CVE	CVE-2023-32695	27 May 202315:44	–	debiancve

Vulners

Node

socket socket.io-parserRange<3.3.4npm

OR

socket socket.io-parserRange4.0.4–4.2.3npm

OR

socket socket.io-parserRange3.4.0–3.4.3npm

Source	Link
github	www.github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9
github	www.github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced
github	www.github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3
github	www.github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32695
github	www.github.com/socketio/socket.io-parser/releases/tag/4.2.3
github	www.github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4
github	www.github.com/advisories/GHSA-cqmj-92xf-r6r9

18 Nov 2024 16:26Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.3 - 7.5

EPSS0.00302

SSVC

node.js socket.io validation exception server security advisory