Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Regular Expression Denial Of Service (ReDoS)

🗓️ 17 Jan 2022 13:31:23Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

Regular Expression Denial Of Service (ReDoS) vulnerability in 'block.def' variabl

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Marked, Minimatch and Logback might affect IBM Storage Defender Copy Data Management
26 Sep 202519:29
–ibm
IBM Security Bulletins		Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring instances may be vulnerable to denial of service due to CVE-2022-21680
31 Mar 202214:28
–ibm
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to a REDOS attack in MarkedJS (CVE-2022-21680, CVE-2022-21681)
1 Nov 202319:42
–ibm
IBM Security Bulletins		Security Bulletin: A security vulnerability in Node.js marked module affects IBM Cloud Automation Manager
15 Mar 202217:33
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect
31 Oct 202316:13
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)
12 Mar 202201:27
–ibm
IBM Security Bulletins		Security Bulletin: There is a vulnerability in Node.js used IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-21681, CVE-2022-21680)
2 Mar 202320:47
–ibm
IBM Security Bulletins		Security Bulletin: There are multiple vulnerabilities in Node.js used by IBM Maximo Asset Management (CVE-2022-21681, CVE-2022-21680)
2 Mar 202320:50
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform
17 Feb 202315:44
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities
5 May 202316:01
–ibm
Rows per page
Vulners
Node
node-markednode-markedMatch0.8.0+ds-1debian
AND
node-markednode-markedMatch0.8.0+ds+repack-2debian
AND
debiandebian_linuxMatch999
OR
marked_projectmarkedRange0.8.0–4.0.9js
OR
port389389-ds-baseMatch1.4.2.4_8.module_el8.2.0+366+71e3276f
OR
port389389-ds-baseMatch1.4.3.8_4.module_el8.3.0+455+8e7a8ce8
OR
port389389-ds-baseMatch1.4.3.13_1.module+el8dsrv+8334+69a46a2e
OR
port389389-ds-baseMatch1.4.3.31_11.module+el8dsrv+17815+4f95348d
OR
port389389-ds-baseMatch1.4.3.22_4.module+el8dsrv+13893+84b6c18c
OR
port389389-ds-baseMatch1.4.2.9_1.module_el8+8314+9ac085f5
OR
port389389-ds-baseMatch2.0.10_2.module_el8+13300+9280cf64
OR
port389389-ds-baseMatch1.4.4.16_1.module_el8+12263+528ad51f
OR
port389389-ds-baseMatch1.4.3.22_1.module_el8+11638+e44b1efa
OR
port389389-ds-baseMatch2.0.15_1.module_el8+14202+84d723da
OR
port389389-ds-baseMatch1.4.3.34_1.module+el8dsrv+18528+22f7779f
OR
port389389-ds-baseMatch1.4.4.14_1.module_el8+11637+eeb57913
OR
port389389-ds-baseMatch1.4.2.12_3.module+el8dsrv+6923+6ab1d5c5
OR
port389389-ds-baseMatch1.4.3.8_5.module_el8.3.0+473+53682548
OR
port389389-ds-baseMatch1.4.3.16_19.module_el8.4.0+884+e9b25896
OR
port389389-ds-baseMatch2.0.4_2.module_el8+12007+a1aabee1
OR
port389389-ds-baseMatch1.4.2.14_1.module_el8+9054+3d8ee006
OR
port389389-ds-baseMatch2.0.3_3.module_el8+11636+f9d8b93b.1
OR
port389389-ds-baseMatch1.4.4.9_1.module_el8+10763+39cf6b48
OR
port389389-ds-baseMatch1.4.2.16_1.module_el8+9435+e6daf39f
OR
port389389-ds-baseMatch1.4.3.23_10.module_el8.5.0+946+51aba098
OR
port389389-ds-baseMatch1.4.3.29_3.module+el8dsrv+14615+a86efbbf
OR
port389389-ds-baseMatch2.0.6_1.module_el8+12264+8a44fa21
OR
port389389-ds-baseMatch1.4.3.31_6.module+el8dsrv+16980+c4b9cd33
OR
port389389-ds-baseMatch1.4.3.23_12.module_el8.5.0+1056+b3c5a4b9
OR
port389389-ds-baseMatch1.4.2.15_1.module_el8+9117+61837c89
OR
port389389-ds-baseMatch1.4.3.32_1.module_el8.8.0+1253+f7ab6c12
OR
port389389-ds-baseMatch2.0.15_1.module_el8+14185+adb3f555
OR
port389389-ds-baseMatch1.4.3.8_6.module_el8.3.0+604+ab7bf9cc
OR
port389389-ds-baseMatch1.4.3.2_1.module_el8+7439+6ecde4c0.1
OR
port389389-ds-baseMatch1.4.3.16_16.module_el8.4.0+857+7e200964.0.2
OR
port389389-ds-baseMatch2.0.10_2.module_el8+13301+e597b3a0
OR
port389389-ds-baseMatch1.4.3.16_4.module_el8.4.0+578+f55145db
OR
port389389-ds-baseMatch1.4.3.30_6.module_el8.7.0+1215+4ecf03c5
OR
port389389-ds-baseMatch2.0.6_1.module_el8+12265+8cea0de5
OR
port389389-ds-baseMatch1.4.3.9_1.module_el8+9055+cfd21e9f
OR
port389389-ds-baseMatch1.4.3.23_7.module_el8.5.0+889+90e0384f
OR
port389389-ds-baseMatch1.4.3.17_1.module_el8+10764+2b5f8656
OR
port389389-ds-baseMatch1.4.3.22_1.module+el8dsrv+10501+8ce33e95
OR
port389389-ds-baseMatch1.4.3.16_16.module_el8.4.0+845+0c39e1b7
OR
port389389-ds-baseMatch1.4.2.7_1.module_el8+7440+226525ca
OR
port389389-ds-baseMatch1.4.2.12_5.module+el8dsrv+9896+eb95346c
OR
port389389-ds-baseMatch1.4.3.12_1.module_el8+9436+742cdfb8
OR
port389389-ds-baseMatch2.0.11_1.module_el8+13421+800234d2
OR
port389389-ds-baseMatch1.4.0.20_10.module_el8.0.0+46+21f6e250
OR
port389389-ds-baseMatch1.4.3.3_3.module_el8+8188+5d4c6d06
OR
port389389-ds-baseMatch1.4.4.17_1.module_el8+13163+e27841f7
OR
port389389-ds-baseMatch2.0.4_2.module_el8+12009+23f3e50a
OR
port389389-ds-baseMatch1.4.3.16_7.module_el8.4.0+640+0156da8c
OR
port389389-ds-baseMatch2.0.11_1.module_el8+13420+e8c9d9b1
OR
port389389-ds-baseMatch2.0.13_2.module_el8+13732+8fc23752
OR
port389389-ds-baseMatch1.4.3.13_1.module_el8+10475+b74bca99
OR
port389389-ds-baseMatch2.0.13_1.module_el8+13726+b4423e11
OR
port389389-ds-baseMatch1.4.3.29_7.module+el8dsrv+17334+74991258
OR
port389389-ds-baseMatch1.4.3.8_7.module_el8.3.0+752+5796e55d
OR
port389389-ds-baseMatch2.0.10_1.module_el8+13165+e48f98fd
OR
port389389-ds-baseMatch1.4.3.16_16.module_el8.4.0+856+96fc9be8.0.1
OR
port389389-ds-baseMatch1.4.1.3_7.module_el8.1.0+234+96aec258
OR
port389389-ds-baseMatch2.0.15_1.module_el8+14186+5126dfef
OR
port389389-ds-baseMatch1.4.3.16_8.module_el8.4.0+644+ed25d39e
OR
port389389-ds-baseMatch2.0.10_1.module_el8+13164+4051bcbe
OR
port389389-ds-baseMatch1.4.2.8_3.module_el8+8189+bf1c0954
OR
port389389-ds-baseMatch1.4.3.23_2.module_el8.5.0+835+5d54734c
OR
port389389-ds-baseMatch1.4.3.16_13.module_el8.4.0+804+98b1df0d
OR
port389389-ds-baseMatch2.0.1_1.module_el8+10522+e95198da
OR
port389389-ds-baseMatch1.4.3.36_1.module_el8+462+b1f840b3
OR
port389389-ds-baseMatch1.4.3.21_3.module+el8dsrv+10401+3d549418
OR
port389389-ds-baseMatch1.4.2.12_2.module+el8dsrv+6428+6e54c518
OR
port389389-ds-baseMatch2.0.13_1.module_el8+13725+ceb5f4ae
OR
port389389-ds-baseMatch1.4.1.10_1.module+el8dsrv+4575+0d8b81fc
OR
port389389-ds-baseMatch1.4.3.4_1.module_el8+8313+cbc65bae
OR
port389389-ds-baseMatch1.4.3.27_2.module+el8dsrv+12690+c6df6d1b
OR
port389389-ds-baseMatch1.4.3.16_6.module_el8.4.0+600+c0025a72
OR
port389389-ds-baseMatch1.4.2.4_10.module_el8.2.0+489+38ed056a
OR
port389389-ds-baseMatch1.4.3.28_6.module_el8.6.0+1102+fe5d910f
OR
port389389-ds-baseMatch1.4.4.15_2.module_el8+12008+be90a417
OR
cephcephMatch16.2.10_172.el9cp
OR
cephcephMatch16.2.10_138.el9cp
OR
cephcephMatch16.2.10_94.el9cp
OR
cephcephMatch16.2.10_160.el9cp
OR
cephcephMatch16.2.10_187.el9cp
OR
cephcephMatch16.2.8_85.el9cp
OR
cephcephMatch17.2.5_75.el9cp
OR
cephcephMatch17.2.6_70.el9cp
OR
cephcephMatch16.2.8_84.el9cp

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Nov 2023 22:28Current
4.8Medium risk
Vulners AI Score4.8
CVSS 3.17.5
CVSS 25
EPSS0.00708
regular expression denial of servicevulnerabilitybacktrackingblock definitionsoftware
27