Lucene search
Veracode Vulnerability DatabaseVERACODE:22546HistoryFeb 21, 2020 - 3:24 a.m.
Denial Of Service (DoS)
2020-02-2103:24:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.003
Percentile
69.0%
uap-core is vulnerable to denial of service. A remote attacker is able to crash the application from excess resource consumption due to overlapping capture groups, by passing malicious values within the User-Agent header in a HTTP request for parsing.
Related
cvelist
cvelist
debiancve
debiancve
CVE-2020-5243
2020-02-21 00:15:10
github
github
Denial of Service in uap-core when processing crafted User-Agent strings
2020-02-20 23:26:10
ubuntucve
ubuntucve
CVE-2020-5243
2020-02-21 00:00:00
prion
prion
Design/Logic Flaw
2020-02-21 00:15:00
osv
osv
Denial of Service in uap-core when processing crafted User-Agent strings
2020-02-20 23:26:10
CVE-2020-5243
2020-02-21 00:15:10
nvd
nvd
CVE-2020-5243
2020-02-21 00:15:10
rubygems
rubygems
Denial of Service in uap-core when processing crafted User-Agent strings
2020-03-09 21:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2020-03-11 01:28:44
cve
cve
CVE-2020-5243
2020-02-21 00:15:10
kitploit
kitploit