Lucene search

K
redosRedosROS-20240808-03
HistoryAug 08, 2024 - 12:00 a.m.

ROS-20240808-03

2024-08-0800:00:00
redos.red-soft.ru
6
node.js
http server
vulnerability
remote attackers
security bypass
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

A vulnerability in the HTTP server of the Node.js software platform is related to uncontrolled resource consumption as a result of reading an unlimited number of bytes from a single connection while processing HTTP requests.
as a result of reading an unlimited number of bytes from a single connection when processing HTTP requests with fragmented encoding.
with fragmented encoding. Exploitation of the vulnerability allows an attacker acting remotely,
Bypass security restrictions and cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64nodejs<ย 18.20.1-1UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low