Lucene search
Veracode Vulnerability DatabaseVERACODE:6651HistoryJun 07, 2018 - 1:06 p.m.
Regular Expression Denial Of Service (ReDoS)
2018-06-0713:06:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.009 Low
EPSS
Percentile
82.9%
ua-parser is vulnerable to regular expression denial of service (ReDoS). A malicious user can pass a string through the User-Agent header to cause a ReDoS.
References
Related
nvd
nvd
CVE-2017-16086
2018-06-07 02:29:01
nodejs
nodejs
ReDoS via long UserAgent header
2017-03-06 22:27:51
osv
osv
ReDoS via long UserAgent header in ua-parser
2018-07-24 19:46:37
cve
cve
CVE-2017-16086
2018-06-07 02:29:01
prion
prion
Design/Logic Flaw
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16086
2018-04-26 00:00:00
ibm
ibm
github
github
ReDoS via long UserAgent header in ua-parser
2018-07-24 19:46:37