Lucene search
Veracode Vulnerability DatabaseVERACODE:30321HistoryMay 02, 2021 - 11:38 p.m.
Denial Of Service (DoS)
2021-05-0223:38:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
55.3%
cumulative-distribution-function is vulnerable to denial of service. An attacker is able to send improper data such as invalid non-numeric or string data to cause an infinite while-loop in the function for evaluating the cumulative-distribution-function of input data, potentially resulting in an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cumulative-distribution-function | le | 1.0.3 |
References
github.com/DrPaulBrewer/cumulative-distribution-function/commit/339a6cdbf716eca7df9a731a909887f98f87246d
github.com/DrPaulBrewer/cumulative-distribution-function/issues/7
github.com/DrPaulBrewer/cumulative-distribution-function/pull/8
github.com/DrPaulBrewer/cumulative-distribution-function/security/advisories/GHSA-58qp-5328-v7mh
www.npmjs.com/package/cumulative-distribution-function
Related
cve
cve
CVE-2021-29486
2021-04-30 18:15:07
prion
prion
Design/Logic Flaw
2021-04-30 18:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-29486
2021-04-30 18:15:07
osv
osv
cumulative-distribution-function Infinite Loop vulnerability
2021-05-04 17:43:36
github
github
cumulative-distribution-function Infinite Loop vulnerability
2021-05-04 17:43:36