Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2018/08/31 6:22 a.m.27 views

Mosca REDoS Vulnerability

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacke...

7.8CVSS7.2AI score0.12358EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2018/08/30 12:29 p.m.26 views

CVE-2018-11615

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacke...

7.8CVSS7.5AI score0.12358EPSS
Exploits0References1
OSV
OSV
added 2018/08/30 12:29 p.m.15 views

CVE-2018-11615

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacke...

7.5CVSS7.5AI score
Exploits0References1
Prion
Prion
added 2018/08/30 12:29 p.m.15 views

Design/Logic Flaw

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacke...

7.8CVSS7.5AI score0.12358EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/08/30 12:0 p.m.57 views

CVE-2018-11615

CVE-2018-11615 affects the mosca broker (npm mosca) 2.8.1. The vulnerability is rooted in topic processing: a crafted regular expression can trigger a denial-of-service condition, crashing the broker without requiring authentication. The primary exploit path is remote, leading to availability imp...

7.8CVSS7.4AI score0.12358EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/08/30 12:0 p.m.28 views

CVE-2018-11615

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacke...

7.5AI score0.12358EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/06/13 12:0 a.m.26 views

npm mosca Regular Expression Parsing Denial-of-Service Vulnerability

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash. An attacker can...

7.1CVSS3.9AI score0.12358EPSS
Exploits0
Rows per page
Query Builder