Denial Of Service (DoS)

🗓️ 26 May 2023 06:07:29Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 28 Views

Vulnerability in socket.io-parser causes application crash

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	28 Mar 202415:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, AngularJS, Golang Go, libcURL, PostgreSQL, Linux kernel might affect IBM Spectrum Protect Plus	24 Sep 202405:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2023-32695]	27 Jun 202311:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	5 Jul 202318:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
Circl	CVE-2023-32695	27 May 202322:17	–	circl
CNNVD	Socket.IO 代码问题漏洞	27 May 202300:00	–	cnnvd
CVE	CVE-2023-32695	27 May 202315:44	–	cve
Cvelist	CVE-2023-32695 Insufficient validation when decoding a Socket.IO packet	27 May 202315:44	–	cvelist
Debian CVE	CVE-2023-32695	27 May 202315:44	–	debiancve

Vulners

Node

node-socket.io-parser node-socket.io-parserMatch3.4.1-1debian

AND

debian debian_linuxMatch999

OR

socket socket.io-parserRange4.0.4–4.2.2js

OR

socket socket.io-parserRange2.2.4–3.4.1js

OR

socket socket.io-parserRange4.0.0–4.2.2js

OR

socket socket.io-parserRange1.0.1–3.4.2js

Source	Link
github	www.github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced
github	www.github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3
github	www.github.com/advisories/GHSA-cqmj-92xf-r6r9
github	www.github.com/socketio/socket.io-parser/releases/tag/4.2.3
github	www.github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9

31 May 2023 19:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.3 - 7.5

EPSS0.00302

SSVC

denial of service socket.io validation node.js vulnerability