Linux Distros Unpatched Vulnerability : CVE-2017-16026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the...

RHEL 8 : nodejs-request (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-request: Remote Memory Exposure when a multipart request is made CVE-2017-16026 Note that Nessus has not...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +20118 more potentially affected by CVE-2017-16026 via request (>=2.2.6, <=2.67.0)

request NPM version =2.2.6, =2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on request and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 -...

CVE-2017-16026

creationtimestamp| type| source ---|---|--- 2018-11-09 17:44:01+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7xfp-9c55-5vqj...

CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

CVE-2017-16026

The CVE-2017-16026 issue affects the Node.js request module: when making a multipart request and the body is a number, the specified amount of non-zero memory may be disclosed to the recipient. Affected versions are 2.2.6 through 2.47.0 and 2.51.0 through 2.67.0. Root cause is a memory exposure i...