Lucene search
Cristian-Alexandru StaicuNODEJS:535HistorySep 25, 2017 - 7:02 p.m.
Regular Expression Denial of Service
2017-09-2519:02:28
Cristian-Alexandru Staicu
www.npmjs.com
36
0.001 Low
EPSS
Percentile
47.9%
Overview
Affected versions of mime are vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.
Recommendation
Update to version 2.0.3 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| mime | lt | 1.4.1 || > 2.0.0 < 2.0.3 |
Related
osv
osv
mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input
2018-07-20 16:20:52
CVE-2017-16138
2018-06-07 02:29:03
nessus
nessus
RHEL 8 : nodejs-mime (Unpatched Vulnerability)
2024-05-11 00:00:00
nvd
nvd
CVE-2017-16138
2018-06-07 02:29:03
github
github
cve
cve
CVE-2017-16138
2018-06-07 02:29:03
redhatcve
redhatcve
CVE-2017-16138
2018-06-07 08:18:58
cvelist
cvelist
CVE-2017-16138
2018-04-26 00:00:00
ubuntucve
ubuntucve
CVE-2017-16138
2018-06-07 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2017-09-26 09:49:25
debiancve
debiancve
CVE-2017-16138
2018-06-07 02:29:03
prion
prion
Input validation
2018-06-07 02:29:00
redhat
redhat
