Lucene search
Ubuntu.comUB:CVE-2016-10539HistoryMay 31, 2018 - 12:00 a.m.
CVE-2016-10539
2018-05-3100:00:00
ubuntu.com
ubuntu.com
8
0.001 Low
EPSS
Percentile
44.6%
negotiator is an HTTP content negotiator for Node.js and is used by many
modules and frameworks including Express and Koa. The header for
“Accept-Language”, when parsed by negotiator 0.6.0 and earlier is
vulnerable to Regular Expression Denial of Service via a specially crafted
string.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 18.10 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 19.04 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 19.10 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 20.04 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 20.10 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 21.04 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 21.10 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 22.04 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
| ubuntu | 22.10 | noarch | node-negotiator | < 0.6.1-1 | UNKNOWN |
Related
debiancve
debiancve
CVE-2016-10539
2018-05-31 20:29:01
cvelist
cvelist
CVE-2016-10539
2018-04-26 00:00:00
cve
cve
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
osv
osv
CVE-2016-10539
2018-05-31 20:29:01
Regular Expression Denial of Service in negotiator
2018-10-09 00:30:30
prion
prion
Design/Logic Flaw
2018-05-31 20:29:00
Design/Logic Flaw
2019-12-20 13:15:00
nvd
nvd
CVE-2016-10539
2018-05-31 20:29:01
CVE-2016-1000022
2019-12-20 13:15:11
nodejs
nodejs
Regular Expression Denial of Service
2016-05-04 16:34:12
github
github
Regular Expression Denial of Service in negotiator
2018-10-09 00:30:30