Lucene search
+L

907 matches found

RedhatCVE
RedhatCVE
added 2021/09/24 9:25 a.m.47 views

CVE-2021-3807

A regular expression denial of service ReDoS vulnerability was found in nodejs-ansi-regex. This could possibly cause an application using ansi-regex to use an excessive amount of CPU time when matching crafted ANSI escape codes...

7.8CVSS2.9AI score0.03552EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/09/23 12:00 a.m.65 views

libiff buffer overflow vulnerability

libiff is a portable and extensible parser library for EA-IFF 85 implemented in ANSI C. A global buffer overflow vulnerability exists in the IFFerrorId function in error.c in libiff 20190123 and earlier versions. An attacker could exploit this vulnerability to execute code...

8.8CVSS7.1AI score0.01513EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
added 2021/09/20 8:20 p.m.3 views

@asiachan/ui-h5 (>=0.0.1, <=0.0.12), @asiachan/ui-h5-test (0.0.1) +57 more potentially affected by CVE-2021-3807 via ansi-regex (5.0.0)

ansi-regex NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - @asiachan/ui-h5 =0.0.1, =0.2.16, =3.0.1-1.0, =1.0.0, =2.1.6, =0.0.0, =0.0.25, =0.0.0, =0.0.19, =0.8.5, =0.8.40 and more Source cves:...

7.8CVSS7.1AI score0.03552EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2021/09/20 8:20 p.m.6 views

@codedungeon/gunner (>=0.38.0, <=0.80.1), @codedungeon/laravel-versions-cli (0.1.0) +22 more potentially affected by CVE-2021-3807 via ansi-regex (>=4.0.0, <=4.1.0)

ansi-regex NPM version =4.0.0, =0.38.0, =0.0.65, =0.0.0, =0.0.41, =0.0.12, =0.0.0, =0.2.0, =3.3.69, =0.0.3, =0.2.11, =5.1.0, =4.0.58, =3.0.58, =6.0.17, =6.1.110 and more Source cves: CVE-2021-3807 Source advisory: OSV:GHSA-93Q8-GQ69-WQMW...

7.8CVSS7.1AI score0.03552EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2021/09/20 8:20 p.m.4 views

@bdehamer/foo-a (>=0.1.0, <=0.1.1), @platform/cell.cli (0.2.277) +10 more potentially affected by CVE-2021-3807 via ansi-regex (6.0.0)

ansi-regex NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - @bdehamer/foo-a =0.1.0, =0.1.1 - @platform/cell.cli 0.2.277 - @platform/cell.fs.sync 0.3.273 - @platform/cell.service 0.8.41 -...

7.8CVSS7.1AI score0.03552EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2021/09/20 8:20 p.m.6 views

abt.api.web (0.0.3) potentially affected by CVE-2021-3807 via ansi-regex (3.0.0)

ansi-regex NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - abt.api.web 0.0.3 Source cves: CVE-2021-3807 Source advisory: OSV:GHSA-93Q8-GQ69-WQMW...

7.8CVSS7.1AI score0.03552EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2021/09/20 8:20 p.m.123 views

Inefficient Regular Expression Complexity in chalk/ansi-regex

ansi-regex is vulnerable to Inefficient Regular Expression Complexity which could lead to a denial of service when parsing invalid ANSI escape codes. Proof of Concept js import ansiRegex from 'ansi-regex'; forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = "\u001B"+";".repeati10000...

7.8CVSS8.4AI score0.03552EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2021/09/20 10:48 a.m.34 views

Regular Expression Denial Of Service (ReDoS)

ansi-regex is vulnerable to regular expression denial of service. The vulnerability exists due to an inefficient handling of user-provided string pattern, causing intensive processing of regular expression machine and application crash...

7.5CVSS3.1AI score0.03552EPSS
SaveExploits1References4Affected Software8
NVD
NVD
added 2021/09/17 7:15 a.m.22 views

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS0.03552EPSS
SaveExploits1References4
OSV
OSV
added 2021/09/17 7:15 a.m.6 views

DEBIAN-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.1AI score0.03552EPSS
SaveExploits1References1
OSV
OSV
added 2021/09/17 7:15 a.m.31 views

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.6AI score
SaveExploits0References4
attackerkb
attackerkb
added 2021/09/17 7:15 a.m.8 views

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS6.8AI score0.03552EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/09/17 7:15 a.m.402 views

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS6.8AI score0.03552EPSS
SaveExploits1References3
OSV
OSV
added 2021/09/17 7:15 a.m.12 views

UBUNTU-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.8AI score0.03552EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/09/17 12:00 a.m.8 views

ansi-regex 安全漏洞

Ansi-Regex is a regular expression used to match ANSI escape codes. A security vulnerability exists in ansi-regex that stems from vulnerability to inefficient regular expression complexity...

7.8CVSS7.2AI score0.03552EPSS
SaveExploits1References37
Cvelist
Cvelist
added 2021/09/17 12:00 a.m.38 views

CVE-2021-3807 Inefficient Regular Expression Complexity in chalk/ansi-regex

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS8.8AI score0.03552EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2021/09/17 12:00 a.m.29 views

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS8.6AI score0.03552EPSS
SaveExploits1
CVE
CVE
added 2021/09/17 12:00 a.m.1498 views

CVE-2021-3807

CVE-2021-3807 affects ansi-regex, enabling Regular Expression Denial of Service (ReDoS) with high impact (CVSS v3.1 base 7.5). Connected docs confirm DoS in Jira Data Center/Server and Jira Service Management, with fixed versions including Jira DC/Server 10.3.16+ and 11.2.1+. Remediation is to up...

7.8CVSS8.7AI score0.03552EPSS
SaveExploits1References4Affected Software1
Huntr
Huntr
added 2021/09/09 11:25 a.m.129 views

Inefficient Regular Expression Complexity in chalk/ansi-regex

✍️ Description It allows cause a denial of service when matching crafted invalid ANSI escape codes. 🕵️‍♂️ Proof of Concept // PoC.mjs import ansiRegex from 'ansi-regex'; forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = "\u001B"+";".repeati10000; ansiRegex.testattackstr var timecost...

7.8CVSS2.8AI score0.03552EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/09/05 12:00 a.m.9 views

Fedora: Security Advisory for libss7 (FEDORA-2021-91d42ce83e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder