Lucene search
Redhat.comRH:CVE-2018-3739HistoryDec 25, 2019 - 9:27 p.m.
CVE-2018-3739
2019-12-2521:27:53
redhat.com
access.redhat.com
9
0.007 Low
EPSS
Percentile
79.7%
A flaw was found in https-proxy-agent, prior to version 2.2.0. It was discovered https-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter.
Related
cve
cve
CVE-2018-3739
2018-06-07 02:29:08
CVE-2018-3736
2018-06-07 02:29:08
ibm
ibm
osv
osv
CVE-2018-3739
2018-06-07 02:29:08
Denial of Service in https-proxy-agent
2018-07-27 17:04:52
cvelist
cvelist
CVE-2018-3739
2018-04-26 00:00:00
github
github
Denial of Service in https-proxy-agent
2018-07-27 17:04:52
veracode
veracode
Denial Of Service (DoS)
2019-07-10 04:47:11
prion
prion
Design/Logic Flaw
2018-06-07 02:29:00
nvd
nvd
CVE-2018-3739
2018-06-07 02:29:08
CVE-2018-3736
2018-06-07 02:29:08
redhatcve
redhatcve
CVE-2018-3736
2019-12-26 09:41:04