Lucene search
RedosROS-20240916-07HistorySep 16, 2024 - 12:00 a.m.
ROS-20240916-07
2024-09-1600:00:00
redos.red-soft.ru
1
node.js
fetch()
vulnerability
remote
dos
attack
resource consumption
exploitation
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
A vulnerability in the fetch() function of the Node.js software platform involves uncontrolled resource consumption.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
(DoS)
Related
cve
cve
CVE-2024-22025
2024-03-19 05:15:10
vulnrichment
vulnrichment
CVE-2024-22025
2024-03-19 04:32:34
hackerone
hackerone
Node.js: Denial of Service by resource exhaustion in fetch() brotli decoding
2023-12-13 20:19:55
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service [CVE-2024-22025]
2024-06-05 14:55:36
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js.
2024-05-10 14:52:40
Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control
2024-07-08 09:24:14
debiancve
debiancve
CVE-2024-22025
2024-03-19 05:15:10
redhatcve
redhatcve
CVE-2024-22025
2024-03-21 00:28:56
cbl_mariner
cbl_mariner
CVE-2024-22025 affecting package nodejs for versions less than 16.20.2-4
2024-04-09 20:48:36
CVE-2024-22025 affecting package nodejs18 for versions less than 18.18.2-5
2024-04-09 20:48:36
CVE-2024-22025 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
ubuntucve
ubuntucve
CVE-2024-22025
2024-03-19 00:00:00
cvelist
cvelist
CVE-2024-22025
2024-03-19 04:32:34
osv
osv
BIT-node-2024-22025
2024-06-04 09:49:52
nodejs - security update
2024-03-26 00:00:00
Important: nodejs security update
2024-05-20 00:00:00
veracode
veracode
Denial Of Service (DOS)
2024-02-29 04:13:37
nvd
nvd
CVE-2024-22025
2024-03-19 05:15:10
nessus
nessus
CBL Mariner 2.0 Security Update: nodejs18 / nodejs (CVE-2024-22025)
2024-07-03 00:00:00
RHEL 9 : nodejs (RHSA-2024:4721)
2024-07-23 00:00:00
redhat
redhat
(RHSA-2024:4559) Moderate: nodejs security update
2024-07-16 12:31:56
(RHSA-2024:4721) Moderate: nodejs security update
2024-07-23 08:25:08
(RHSA-2024:2780) Important: nodejs:18 security update
2024-05-09 05:32:23
openvas
openvas
Debian: Security Advisory (DLA-3776-1)
2024-03-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0733-1)
2024-03-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0732-1)
2024-03-01 00:00:00
debian
debian
[SECURITY] [DLA 3776-1] nodejs security update
2024-03-27 00:40:58
mageia
mageia
Updated nodejs yarnpkg packages fix security vulnerabilities
2024-02-23 01:20:27
oraclelinux
oraclelinux
nodejs:18 security update
2024-05-14 00:00:00
nodejs:18 security update
2024-05-10 00:00:00
nodejs:20 security update
2024-05-16 00:00:00
rocky
rocky
nodejs:20 security update
2024-06-14 14:00:40
nodejs security update
2024-06-14 14:00:40
nodejs:20 security update
2024-05-09 18:50:42
almalinux
almalinux
Important: nodejs:18 security update
2024-05-09 00:00:00
Important: nodejs:20 security update
2024-05-09 00:00:00
Important: nodejs:20 security update
2024-05-15 00:00:00
freebsd
freebsd
NodeJS -- Vulnerabilities
2024-02-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0213
2024-02-20 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0586
2024-03-29 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0738
2024-03-19 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
Related for ROS-20240916-07