CVE-2016-1000022

Common vulnerabilities & exposures (CVE)

Published at: - 16-06-2016 02:00

Last modified: - 16-06-2016 02:00

Total changes: - 9

CVE-2016-1000022 nodejs-negotiator: Regular expression denial-of-service

AV:N/AC:M/Au:N/C:N/I:N/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

4.3

Base score

Exploitability score

Impact score

AND

product=nodejs-accepts-0 AND versionEndExcluding=1.3.3-1.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-express-0 AND versionEndExcluding=4.13.3-4.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-mime-db-0 AND versionEndExcluding=1.23.0-1.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-mime-types-0 AND versionEndExcluding=2.1.11-1.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-minimatch-0 AND versionEndExcluding=3.0.2-1.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-negotiator-0 AND versionEndExcluding=0.6.1-1.el7

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.2

AND

product=nodejs-accepts-0 AND versionEndExcluding=1.3.3-1.el7