1746 matches found
CVE-2020-5236
Waitress 1.4.2 ReDoS - CVE-2020-5236 Waitress 버전 1.4.2는 잘못된 문자가 포함된 헤더를 수신할 때 DoS 공격을 허용합니다. "Bad-header: xxxxxxxxxxxxxxx\x10"과 같은 헤더를 수신하면 정규 표현식 엔진이 치명적으로 역추적되어 프로세스가 CPU 시간을 100% 사용하게 되고 다른 모든 상호 작용이 차단됩니다. 이로 인해 공격자는 잘못된 헤더가 포함된 단일 요청을 전송하여 서비스를 오프라인으로 만들 수 있습니다. NVD 제공 사용 취약한 서버 실행 $ docker...
regexploit
Regexploit 정규 표현식 서비스 거부 ReDoS에 취약한 정규식을 찾습니다. 자세한 내용은Doyensec 블로그에서 확인하세요. 많은 기본 정규 표현식 파서는 최악의 경우 복잡도가 제한되지 않습니다. 정규식 일치는 일치하는 입력 문자열이 주어지면 빠를 수 있습니다. 그러나 특정 비일치 입력 문자열은 정규식 일치 엔진이 엄청난 백트래킹 루프에 빠지게 하여 처리하는 데 오랜 시간이 걸릴 수 있습니다. 이는 CPU가 정규식을 일치시키려고 붙잡혀 있기 때문에 서비스 거부를 유발할 수 있습니다. 이 도구는 다음을 위해...
regexploit
Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...
CVE-2024-27088
CVE-2024-27088 취약점 개요 CVE-2024-27088 2024년 2월 26일 node.js 패키지의 ReDoS rebob 프로젝트의 일환 취약점 설명 github advisories /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ 이 취약점은 괄호의 불균형이 있을 때 악용될 수 있으며, 이로 인해 과도한 백트래킹이 발생하고 결과적으로 CPU 부하와 처리 시간이 크게 증가합니다. 이 취약점은 다음 입력을 사용하여 트리거할 수 있습니다: 'function' + 'n'.repeat31 + ''...
CVE-2023-43646
CVE-2023-43646 취약점 개요 CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories /\sfunction?:\s|\s/^?:/+/\s^\/+/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently...
axios: Axios: Denial of Service via malformed data URLs
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
axios: Axios: Denial of Service via malformed data URLs
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
axios: Axios: Denial of Service via malformed data URLs
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
PoC-CVE-2025-25200
CVE-2025-25200 컨텍스트 취약점: CVE-2025-25200 유형: 정규 표현식 서비스 거부ReDoS 구성 요소: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 설명: 이 취약점은 2차 시간 복잡도 On2 또는 더 심각한 시나리오에서는 지수 시간 복잡도 O2n을 나타냅니다. 즉, 입력을 처리하는 데 필요한 시간이 입력 크기에 따라 증가합니다역추적. 문제의 원인은 백트래킹이라고 하는 정규 표현식 엔진의 메커니즘에 있습니다. 입력토큰이 일치하지 않으면 엔진은 대체 경로를...
GHSA-P6PP-M3F8-5C89 jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
Status FULLY REPRODUCED with a clean, textbook empirical signature: measured runtime grew almost exactly 4x for every doubling of input size across five consecutive doublings 5,000 → 160,000 characters, confirming On² behavior. A single 160,000-character string smaller than a typical HTTP request...
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
Status FULLY REPRODUCED with a clean, textbook empirical signature: measured runtime grew almost exactly 4x for every doubling of input size across five consecutive doublings 5,000 → 160,000 characters, confirming On² behavior. A single 160,000-character string smaller than a typical HTTP request...
basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
Summary Client.list parses the server's directory listing with the Unix-style parser in parseListUnix.js. Its RELINE regex has two adjacent \S+?:\s\S+ groups owner name, then group name followed by a required numeric size group. When a line starts with a valid listing prefix but the tokens after ...
GHSA-C475-QRG2-PJ4R basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
Summary Client.list parses the server's directory listing with the Unix-style parser in parseListUnix.js. Its RELINE regex has two adjacent \S+?:\s\S+ groups owner name, then group name followed by a required numeric size group. When a line starts with a valid listing prefix but the tokens after ...
Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2024_8447)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248447 advisory. python: cpython: tarfile: ReDos via excessive backtracking while parsing header values CVE-2024-6232 Tenable has extracted the preceding description block directly...
EUVD-2026-74845
GitPython: Denial of Service via catastrophic backtracking ReDoS in Actor.nameemailregex — commit author/committer field parsing...
CVE-2026-102990
The basic-ftp FTP client for Node.js (prior to version 6.2.1 ) is vulnerable to a quadratic-time CPU denial of service . A malicious or compromised FTP server can trigger this by providing a crafted directory listing where the RE_LINE expression in src/parseListUnix.ts backtracks across adjacent ...
CVE-2026-102990 basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsing a directory listing because the RELINE expression in src/parseListUnix.ts backtracks across adjacent variable-length owner and group field...
CVE-2026-102990 basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)
basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsing a directory listing because the RELINE expression in src/parseListUnix.ts backtracks across adjacent variable-length owner and group field...
Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
Summary Axios shouldBypassProxy normalizes hostnames with hostname.replace/.+$/, ''. For a hostname shaped as many dots followed by a non-dot, the anchored regex can perform quadratic backtracking. Because axios re-evaluates proxy bypass rules for redirected requests, a malicious server can...