Lucene search

K
osvGoogleOSV:GHSA-CX8M-8XMX-Q8V3
HistoryOct 10, 2018 - 5:25 p.m.

Denial of Service in memjs

2018-10-1017:25:12
Google
osv.dev
3

0.004 Low

EPSS

Percentile

73.4%

Versions of memjs prior to 1.2.2 are vulnerable to Denial of Service (DoS). The package fails to sanitize the value option passed to the Buffer constructor, which may allow attackers to pass large values exhausting system resources.

Recommendation

Upgrade to version 1.2.2 or later.

CPENameOperatorVersion
memjsle1.2.0

0.004 Low

EPSS

Percentile

73.4%

Related for OSV:GHSA-CX8M-8XMX-Q8V3