Lucene search
K

Design/Logic Flaw

🗓️ 07 Jun 2018 02:29:00Reported by PRIOn knowledge baseType 
prion
 prion
🔗 www.prio-n.com👁 11 Views

The timespan module is vulnerable to regular expression denial of service and will block the event loop for around 10 seconds when given 50k characters of untrusted user input

Related
Refs
ReporterTitlePublishedViews
Family
CNVD
timespan module denial of service vulnerability
20 Jun 201800:00
cnvd
CVE
CVE-2017-16115
7 Jun 201802:00
cve
Cvelist
CVE-2017-16115
7 Jun 201802:00
cvelist
EUVD
EUVD-2018-0395
7 Oct 202500:30
euvd
Github Security Blog
Regular Expression Denial of Service in timespan
29 Aug 201823:04
github
Node.js
Regular Expression Denial of Service
21 Sep 201720:44
nodejs
NVD
CVE-2017-16115
7 Jun 201802:29
nvd
OSV
CVE-2017-16115
7 Jun 201802:29
osv
OSV
GHSA-F523-2F5J-GFCG Regular Expression Denial of Service in timespan
29 Aug 201823:04
osv
Veracode
Regular Expression Denial Of Service (ReDoS)
26 Sep 201702:37
veracode
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Feb 2020 16:24Current
7.5High risk
Vulners AI Score7.5
EPSS0.01503
11