Regular Expression Denial of Service in hawk

🗓️ 31 Jul 2018 22:52:00Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 32 Views

Regular Expression Denial of Service in hawk Version

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool	17 Jun 201805:13	–	ibm
IBM Security Bulletins	Security Bulletin: Current Releases of IBM® SDK for Node.js™ in IBM Bluemix are affected by CVE-2016-3956, CVE-2016-2515 and CVE-2016-2537.	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2016-2515 and CVE-2016-2537	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in NPM affects IBM API Connect (CVE-2016-3956, CVE-2016-2537, CVE-2016-2515)	15 Jun 201807:05	–	ibm
CNVD	Hawk Denial of Service Vulnerability	15 Apr 201600:00	–	cnvd
CVE	CVE-2016-2515	13 Apr 201616:00	–	cve
Cvelist	CVE-2016-2515	13 Apr 201616:00	–	cvelist
EUVD	EUVD-2018-0286	7 Oct 202500:30	–	euvd
Node.js	Regular Expression Denial of Service	19 Jan 201621:50	–	nodejs

Vulners

Node

hawk_project hawkRange4.0.0–4.1.1npm

OR

hawk_project hawkRange<3.1.3npm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2515
github	www.github.com/hueniverse/hawk/issues/168
github	www.github.com/advisories/GHSA-jcpv-g9rr-qxrc
npmjs	www.npmjs.com/advisories/77
github	www.github.com/hueniverse/hawk/commit/0833f99ba64558525995a7e21d4093da1f3e15fa
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2016/02/20/1
openwall	www.openwall.com/lists/oss-security/2016/02/20/2

11 Apr 2023 00:22Current

5.5Medium risk

Vulners AI Score5.5

CVSS 37.5

CVSS 27.8

EPSS0.05317

hawk vulnerability regular expression denial of service update software