Denial Of Service (DoS) Memory Consumption

🗓️ 15 Jan 2019 09:12:08Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Node.js qs module DoS vulnerabilit

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Current Release of IBM® SDK for Node.js™ is affected by CVE-2014-7191	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: qs (QueryString) package in the Service Portal of IBM Control Desk is vulnerable (CVE-2014-7191 and CVE-2017-1000048)	9 Sep 202213:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is affected by multiple vulnerabilities	6 Oct 202306:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affecting the Cordova platform and IBM SDK Node.js packaged with Rational Software Architect and Rational Software Architect for WebSphere Software	10 Sep 202015:43	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Node.js modules affect IBM Business Process Manager (BPM) Configuration Editor (CVE-2014-6394, CVE-2014-7191)	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in modules from the IBM SDK for Node.js affect the Cordova tools packaged in Rational Developer for i Modernization Tools Java Edition and Rational Developer for AIX and Linux (CVE-2014-7191 and CVE-2014-7192)	3 Aug 201804:23	–	ibm
CVE	CVE-2014-7191	19 Oct 201401:00	–	cve
Cvelist	CVE-2014-7191	19 Oct 201401:00	–	cvelist
Debian CVE	CVE-2014-7191	19 Oct 201401:00	–	debiancve

Vulners

Node

nodejs010-nodejs-qs nodejs010-nodejs-qsMatch0.6.5_3.el6

OR

nodejs010-nodejs-qs nodejs010-nodejs-qsMatch0.5.6_2.el6_4

OR

nodejs010-node-gyp nodejs010-node-gypMatch0.9.5_3.el6

OR

nodejs010-node-gyp nodejs010-node-gypMatch3.2.0_2.el6

OR

nodejs010-node-gyp nodejs010-node-gypMatch1.0.2_3.el6

OR

nodejs010-node-gyp nodejs010-node-gypMatch0.12.2_2.el6

Source	Link
secunia	www.secunia.com/advisories/60026
secunia	www.secunia.com/advisories/62170
access	www.access.redhat.com/security/updates/classification/
rhn	www.rhn.redhat.com/errata/RHSA-2016-1380.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/raymondfeng/node-querystring/commit/43a604b7847e56bba49d0ce3e222fe89569354d8
github	www.github.com/visionmedia/node-querystring/issues/104
nodesecurity	www.nodesecurity.io/advisories/qs_dos_memory_exhaustion
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss

15 May 2019 06:18Current

7.2High risk

Vulners AI Score7.2

CVSS 25

EPSS0.0069

node.js qs module dos