Lucene search
+L

21 matches found

Hacker One
Hacker One
added 2018/03/03 9:51 p.m.30 views

Node.js third-party modules: `stringstream` allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below

I would like to report n uninitialized Buffer allocation issue in stringstream. It allows to extract sensitive data from uninitialized memory or to cause a DoS by passing in a large number, in setups where typed user input can be passed to the stream e.g. from JSON, on Node.js 4.x and lower. Modu...

0.1AI score
SaveExploits0
Rows per page
Query Builder