UbuntuUSN-4783-1minimatch vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
46.1%
Releases
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- node-minimatch - Convert glob expressions into RegExp objects for Node.js
Details
It was discovered that minimatch did not perform necessary bounds checking
on regular expressions. An attacker could use this vulnerability to cause a
denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 16.04 | noarch | node-minimatch | < 1.0.0-1ubuntu0.1~esm2 | UNKNOWN |
| Ubuntu | 16.04 | noarch | node-minimatch | < 1.0.0-1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | node-minimatch | < 0.2.12-1ubuntu0.1~esm2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | node-minimatch | < 0.2.12-1 | UNKNOWN |
References
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
46.1%