Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-7191HistoryOct 19, 2014 - 1:55 a.m.
CVE-2014-7191
2014-10-1901:55:21
Debian Security Bug Tracker
security-tracker.debian.org
13
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.053 Low
EPSS
Percentile
93.1%
The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | node-qs | < 2.2.4-1 | node-qs_2.2.4-1_all.deb |
| Debian | 11 | all | node-qs | < 2.2.4-1 | node-qs_2.2.4-1_all.deb |
| Debian | 999 | all | node-qs | < 2.2.4-1 | node-qs_2.2.4-1_all.deb |
| Debian | 13 | all | node-qs | < 2.2.4-1 | node-qs_2.2.4-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2014-10-19 01:55:00
nessus
nessus
Fedora 19 : nodejs-qs-0.6.6-3.fc19 (2014-11399)
2014-10-06 00:00:00
Fedora 20 : nodejs-qs-0.6.6-3.fc20 (2014-11376)
2014-10-06 00:00:00
redhat
redhat
osv
osv
Denial-of-Service Memory Exhaustion in qs
2017-10-24 18:33:36
cvelist
cvelist
CVE-2014-7191
2014-10-19 01:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: nodejs-qs-0.6.6-3.fc19
2014-10-06 05:04:26
[SECURITY] Fedora 20 Update: nodejs-qs-0.6.6-3.fc20
2014-10-06 05:04:59
ibm
ibm
openvas
openvas
Fedora Update for nodejs-qs FEDORA-2014-11376
2014-10-07 00:00:00
Fedora Update for nodejs-qs FEDORA-2014-11399
2014-10-07 00:00:00
ubuntucve
ubuntucve
CVE-2014-7191
2014-10-19 00:00:00
nodejs
nodejs
Denial-of-Service Memory Exhaustion
2015-10-17 19:41:46
veracode
veracode
Denial Of Service (DoS) Memory Consumption
2019-01-15 09:12:08
nvd
nvd
CVE-2014-7191
2014-10-19 01:55:21
cve
cve
CVE-2014-7191
2014-10-19 01:55:21
github
github
Denial-of-Service Memory Exhaustion in qs
2017-10-24 18:33:36
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.053 Low
EPSS
Percentile
93.1%
Related for DEBIANCVE:CVE-2014-7191