CVE-2017-15010

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 05-09-2017 02:00

Last modified: - 05-09-2017 02:00

Total changes: - 18

Description

CVE-2017-15010 nodejs-tough-cookie: Regular expression denial of service

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

5.3

Base score

Exploitability score

Impact score

Verification logic

OR

AND

product=fh-system-dump-tool-0 AND versionEndExcluding=1.0.0-5.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=fping-0 AND versionEndExcluding=3.10-4.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=nagios-0 AND versionEndExcluding=4.0.8-8.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=nagios-plugins-0 AND versionEndExcluding=2.0.3-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Crypt-CBC-0 AND versionEndExcluding=2.33-2.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Crypt-DES-0 AND versionEndExcluding=2.05-20.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=perl-Net-SNMP-0 AND versionEndExcluding=6.0.1-7.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=phantomjs-0 AND versionEndExcluding=1.9.7-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=python-meld3-0 AND versionEndExcluding=0.6.10-1.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=qstat-0 AND versionEndExcluding=2.11-13.20080912svn311.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=radiusclient-ng-0 AND versionEndExcluding=0.5.6-9.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=redis-0 AND versionEndExcluding=2.8.21-2.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap-fh-openshift-templates-0 AND versionEndExcluding=4.6.0-5.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap-mod_authnz_external-0 AND versionEndExcluding=3.3.1-7.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=sendEmail-0 AND versionEndExcluding=1.56-2.el7

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=ssmtp-0 AND versionEndExcluding=2.64-14.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=supervisor-0 AND versionEndExcluding=3.1.3-3.el7map

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-aaa AND versionEndExcluding=1.1.3-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-appstore AND versionEndExcluding=2.1.2-3

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-mbaas AND versionEndExcluding=6.0.3-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-messaging AND versionEndExcluding=3.2.0-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-metrics AND versionEndExcluding=3.2.0-5

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-ngui AND versionEndExcluding=5.19.3-1

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-scm AND versionEndExcluding=1.1.4-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-sdks AND versionEndExcluding=1.0.0-36

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-statsd AND versionEndExcluding=2.1.3-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/fh-supercore AND versionEndExcluding=5.0.10-2

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/gitlab-shell AND versionEndExcluding=2.1.2-16

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/httpd AND versionEndExcluding=2.4-47

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/installer AND versionEndExcluding=1.0.0-42

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/memcached AND versionEndExcluding=1.4.15-32

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/millicore AND versionEndExcluding=7.55.0-4

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/mongodb AND versionEndExcluding=3.2-36

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/mysql AND versionEndExcluding=5.5-28

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/nagios AND versionEndExcluding=4.0.8-58

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/redis AND versionEndExcluding=2.8.21-40

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/ups-eap AND versionEndExcluding=1.1.4-35

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rhmap46/wildcard-proxy AND versionEndExcluding=1.0.0-17

vendor=Red Hat Enterprise Linux AND product=mobile_application_platform AND version=4.6

AND

product=rh-nodejs4-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-2.el6

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs6-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-1.el6

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs4-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-2.el6

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs6-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-1.el6

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs4-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-2.el7

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs6-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-1.el7

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs4-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-2.el7

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

AND

product=rh-nodejs6-nodejs-tough-cookie-0 AND versionEndExcluding=2.3.3-1.el7

vendor=Red Hat Enterprise Linux AND product=rhel_software_collections AND version=2

Reference

Keywords

REDHAT

CVE-2017-15010

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.