Lucene search
+L

10 matches found

OSV
OSV
•added 2021/04/13 3:15 p.m.•39 views

GHSA-6Q4W-3WP4-Q5WF Denial of Service in get-ip-range

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion. Update get-ip-range dependency to 4.0.0 or above...

7.5CVSS7.3AI score0.02031EPSS
SaveExploits1References5
OSV
OSV
•added 2021/02/11 6:15 p.m.•19 views

CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

7.5CVSS6.6AI score
SaveExploits0References4
NVD
NVD
•added 2021/02/11 6:15 p.m.•22 views

CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

7.5CVSS0.02031EPSS
SaveExploits1References4
Prion
Prion
•added 2021/02/11 6:15 p.m.•25 views

Privilege escalation

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

5CVSS7.3AI score0.02031EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2021/02/11 6:15 p.m.•7 views

CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

7.5CVSS7.3AI score0.02031EPSS
SaveExploits1References5
CVE
CVE
•added 2021/02/11 4:21 p.m.•71 views

CVE-2021-27191

The CVE-2021-27191 issue affects the get-ip-range package for Node.js prior to 4.0.0. It allows denial of service when parsing large/untrusted IP ranges (for example 128.0.0.0/1), leading to resource exhaustion. Remediation is to upgrade to version 4.0.0 or newer. This vulnerability is corroborat...

7.5CVSS7.3AI score0.02031EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/02/11 4:21 p.m.•30 views

CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

7.6AI score0.02031EPSS
SaveExploits1References4
Mend
Mend
•added 2021/02/11 4:21 p.m.•2 views

CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

8.7CVSS0.02031EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•3 views

CVE-2021-27191: Undefined Security Weakness

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service DoS if the range is untrusted input. An attacker could send a large range such as 128.0.0.0/1 that causes resource exhaustion...

7.5CVSS5.8AI score0.02031EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/02/11 12:00 a.m.•2 views

PT-2021-17310

Name of the Vulnerable Software and Affected Versions: get-ip-range versions prior to 4.0.0 Description: The issue allows for denial of service DoS if the range is untrusted input. An attacker could send a large range, such as 128.0.0.0/1, that causes resource exhaustion. Recommendations: Update...

7.5CVSS5.7AI score0.02031EPSS
SaveExploits1References12
Rows per page
Query Builder