Lucene search
GoogleOSV:CVE-2017-15010HistoryOct 04, 2017 - 1:29 a.m.
CVE-2017-15010
2017-10-0401:29:03
Google
osv.dev
7
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
References
www.securityfocus.com/bid/101185
access.redhat.com/errata/RHSA-2017:2912
access.redhat.com/errata/RHSA-2017:2913
access.redhat.com/errata/RHSA-2018:1263
access.redhat.com/errata/RHSA-2018:1264
github.com/salesforce/tough-cookie/issues/92
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/
nodesecurity.io/advisories/525
snyk.io/vuln/npm:tough-cookie:20170905
Related
nodejs
nodejs
Regular Expression Denial of Service
2017-09-08 18:07:02
veracode
veracode
Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies
2017-09-06 06:29:35
Regular Expression Denial Of Service (ReDoS) Via Parsing Cookies
2019-01-15 09:19:22
nvd
nvd
CVE-2017-15010
2017-10-04 01:29:03
CVE-2017-16112
2020-01-27 13:15:10
cve
cve
CVE-2017-15010
2017-10-04 01:29:03
CVE-2017-16112
2020-01-27 13:15:10
redhat
redhat
fedora
fedora
[SECURITY] Fedora 30 Update: nodejs-tough-cookie-2.3.4-1.fc30
2019-06-12 14:48:48
ubuntucve
ubuntucve
CVE-2017-15010
2017-10-04 00:00:00
redhatcve
redhatcve
CVE-2017-15010
2017-10-03 15:49:16
cvelist
cvelist
CVE-2017-15010
2017-10-03 16:00:00
github
github
Regular Expression Denial of Service in tough-cookie
2018-07-24 20:14:39
nessus
nessus
Fedora 30 : nodejs-tough-cookie (2019-76f1b57c1c)
2019-06-13 00:00:00
RHEL 6 / 7 : rh-nodejs6-nodejs-tough-cookie (RHSA-2017:2913)
2024-04-27 00:00:00
RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)
2018-05-04 00:00:00
osv
osv
Regular Expression Denial of Service in tough-cookie
2018-07-24 20:14:39
debiancve
debiancve
CVE-2017-15010
2017-10-04 01:29:03
prion
prion
Design/Logic Flaw
2017-10-04 01:29:00
openvas
openvas
Fedora Update for nodejs-tough-cookie FEDORA-2019-76f1b57c1c
2019-06-13 00:00:00