Lucene search
Veracode Vulnerability DatabaseVERACODE:36585HistoryAug 03, 2022 - 9:52 a.m.
Denial Of Service
2022-08-0309:52:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
60.8%
Socket IO Client is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference occurs when parsing invalid payload format which allows an attacker to cause an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| socket.io-client | eq | 2.0.0 | |
| socket.io-client | le | 1.0.1 | |
| socket.io-client | eq | 2.0.0 | |
| socket.io-client | le | 1.0.1 |
References
github.com/advisories/GHSA-85xx-xhjm-rhrw
github.com/socketio/socket.io-client-java/commit/8664499b6f31154f49783531f778dac5387b766b
github.com/socketio/socket.io-client-java/commit/e8ffe9d1383736f6a21090ab959a2f4fa5a41284
github.com/socketio/socket.io-client-java/issues/508%23issuecomment-1179817361
github.com/socketio/socket.io-client-java/releases/tag/socket.io-client-2.0.1
Related
osv
osv
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
2022-08-03 00:00:57
CVE-2022-25867
2022-08-02 14:15:10
prion
prion
Null pointer dereference
2022-08-02 14:15:00
github
github
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
2022-08-03 00:00:57
cve
cve
CVE-2022-25867
2022-08-02 14:15:10
nvd
nvd
CVE-2022-25867
2022-08-02 14:15:10
cvelist
cvelist
CVE-2022-25867 NULL Pointer Dereference
2022-08-02 00:00:00
ibm
ibm