Lucene search
GoogleOSV:GHSA-582F-P4PG-XC74HistoryOct 15, 2019 - 8:06 p.m.
Regular Expression Denial of Service in csv-parse
2019-10-1520:06:16
Google
osv.dev
14
EPSS
0.003
Percentile
69.5%
Versions of csv-parse prior to 4.4.6 are vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large specially-crafted input very slowly, leading to a Denial of Service. This is triggered when using the cast option.
Recommendation
Upgrade to version 4.4.6 or later.
References
github.com/adaltas/node-csv-parse
github.com/adaltas/node-csv-parse/commit/b9d35940c6815cdf1dfd6b21857a1f6d0fd51e4a
lists.fedoraproject.org/archives/list/[email protected]/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP
nvd.nist.gov/vuln/detail/CVE-2019-17592
security.netapp.com/advisory/ntap-20191127-0002
www.npmjs.com/advisories/1171
Related
symantec
symantec
Npmjs 'csv-parse' Module CVE-2019-17592 Denial of Service Vulnerability
2019-09-18 00:00:00
redhatcve
redhatcve
CVE-2019-17592
2019-10-30 19:25:36
nodejs
nodejs
Regular Expression Denial of Service
2019-09-17 18:16:39
prion
prion
Design/Logic Flaw
2019-10-14 20:15:00
cvelist
cvelist
CVE-2019-17592
2019-10-14 19:59:21
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2019-09-20 03:01:10
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Csv-Parse Project Csv-Parse
2020-12-01 09:18:58
osv
osv
CVE-2019-17592
2019-10-14 20:15:10
ibm
ibm
nvd
nvd
CVE-2019-17592
2019-10-14 20:15:10
cve
cve
CVE-2019-17592
2019-10-14 20:15:10
github
github
Regular Expression Denial of Service in csv-parse
2019-10-15 20:06:16
openvas
openvas
Fedora: Security Advisory for libuv (FEDORA-2020-595ce5e3cc)
2020-01-27 00:00:00
Fedora: Security Advisory for nodejs (FEDORA-2020-595ce5e3cc)
2020-01-27 00:00:00
nessus
nessus
Fedora 31 : 1:libuv / 1:nodejs (2020-595ce5e3cc)
2020-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: libuv-1.34.1-1.fc31
2020-01-24 17:08:56
[SECURITY] Fedora 31 Update: nodejs-12.14.1-3.fc31
2020-01-24 17:08:57