Lucene search
GoogleOSV:GHSA-P4PJ-MG4R-X6V4HistoryFeb 02, 2021 - 3:46 p.m.
Denial of Service in uap-core
2021-02-0215:46:38
Google
osv.dev
4
0.003 Low
EPSS
Percentile
71.3%
Impact
Some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to maliciously crafted long strings.
Patches
Please update uap-core to >= v0.11.0
Downstream packages such as uap-python, uap-ruby etc which depend upon uap-core follow different version schemes.
Related
osv
osv
CVE-2021-21317
2021-02-16 18:15:12
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-02-03 05:36:43
prion
prion
Design/Logic Flaw
2021-02-16 18:15:00
nvd
nvd
CVE-2021-21317
2021-02-16 18:15:12
cve
cve
CVE-2021-21317
2021-02-16 18:15:12
ubuntucve
ubuntucve
CVE-2021-21317
2021-02-16 00:00:00
nodejs
nodejs
Denial of Service
2021-02-23 02:11:16
cvelist
cvelist
CVE-2021-21317 Denial of Service in uap-core
2021-02-16 17:45:16
github
github
Denial of Service in uap-core
2021-02-02 15:46:38