Denial of service when handling a request with many HTTP headers in ws

🗓️ 13 Jul 2024 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 4 Views

Denial of service in WebSocket header handling when a request has many HTTP headers.

Reporter	Title	Published	Views	Family All 90
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	30 Sep 202416:56	–	ibm
ibm	Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities	18 Jul 202411:13	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	15 Apr 202502:34	–	ibm
ibm	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to denial of service vulnerability in Node.js ws module [ CVE-2024-37890]	28 Jan 202522:08	–	ibm
ibm	Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway	13 Nov 202420:07	–	ibm
ibm	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in ws-3.3.3.tgz	7 Jul 202517:59	–	ibm
ibm	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	4 Feb 202518:06	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Manage Component uses ws-7.5.9.tgz which is vulnerable to CVE-2024-37890	30 Jun 202506:29	–	ibm
ibm	Security Bulletin: Vulnerabilities in Node.js and packages affect IBM Voice Gateway	9 Jul 202419:56	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2024-37168] [CVE-2024-34890]	23 Aug 202410:03	–	ibm

Vulners

Node

OR

microsoft cbl2_reaper_3.1.1-18Range<3.1.1-10

microsoft cbl2_reaper_3.1.1-10Range<3.1.1-10

19 Feb 2026 09:53Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.01357

SSVC

denial of service websocket headers http headers