Lucene search
Veracode Vulnerability DatabaseVERACODE:28937HistoryJan 08, 2021 - 6:29 a.m.
Denial Of Service (DoS)
2021-01-0806:29:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.002 Low
EPSS
Percentile
64.5%
socket.io-parser is vulnerable to denial of service. The vulnerability exists due to the building up of ConsOneByteString objects caused by a concatenation approach when maxHttpBufferSize is set to a large size.
| CPE | Name | Operator | Version |
|---|---|---|---|
| socket.io-parser | le | 3.4.1 | |
| socket.io-parser | le | 4.0.2 |
Related
nvd
nvd
CVE-2020-36049
2021-01-08 00:15:11
ubuntucve
ubuntucve
CVE-2020-36049
2021-01-08 00:00:00
osv
osv
Resource exhaustion in socket.io-parser
2021-06-30 16:51:31
CVE-2020-36049
2021-01-08 00:15:11
nodejs
nodejs
Resource exhaustion in socket.io-parser
2021-06-30 16:56:54
cve
cve
CVE-2020-36049
2021-01-08 00:15:11
redhatcve
redhatcve
CVE-2020-36049
2021-01-20 11:21:01
prion
prion
Design/Logic Flaw
2021-01-08 00:15:00
cvelist
cvelist
CVE-2020-36049
2021-01-07 23:24:23
debiancve
debiancve
CVE-2020-36049
2021-01-08 00:15:11
github
github
Resource exhaustion in socket.io-parser
2021-06-30 16:51:31
