Denial Of Service (DoS)

🗓️ 11 Jul 2021 18:21:46Reported by Veracode Vulnerability DatabaseType

Addressable is vulnerable to Denial of Service attacks due to malicious template causing resource issues.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to multiple Vulnerabilities due to Ruby package	20 Jun 202506:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in addressable - CVE-2021-32740 impacts IBM Watson Machine Learning Accelerator	10 Jan 202206:35	–	ibm
AlpineLinux	CVE-2021-32740	6 Jul 202114:15	–	alpinelinux
ArchLinux	[ASA-202107-19] ruby-addressable: denial of service	6 Jul 202100:00	–	archlinux
CBLMariner	CVE-2021-32740 affecting package rubygem-addressable 2.7.0-1	11 Aug 202106:39	–	cbl_mariner
Circl	CVE-2021-32740	6 Jul 202118:36	–	circl
CNNVD	Addressable资源管理错误漏洞	3 Jul 202100:00	–	cnnvd
CVE	CVE-2021-32740	6 Jul 202114:15	–	cve
Cvelist	CVE-2021-32740 Regular Expression Denial of Service in Addressable templates	6 Jul 202114:15	–	cvelist
Debian CVE	CVE-2021-32740	6 Jul 202114:15	–	debiancve

Vulners

Node

AND

AND

AND

AND

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-32740
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYPVOOQU7UB277UUERJMCNQLRCXRCIQ5/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WYPVOOQU7UB277UUERJMCNQLRCXRCIQ5/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDFQM2NHNAZ3NNUQZEJTYECYZYXV4UDS/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SDFQM2NHNAZ3NNUQZEJTYECYZYXV4UDS/
github	www.github.com/sporkmonger/addressable/commit/0d8a3127e35886ce9284810a7f2438bff6b43cbc
github	www.github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g

07 Nov 2023 23:24Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 25

EPSS0.02533