Lucene search

K
redhatcveRedhat.comRH:CVE-2020-36049
HistoryJan 20, 2021 - 11:21 a.m.

CVE-2020-36049

2021-01-2011:21:01
redhat.com
access.redhat.com
14
resource consumption
socket.io-parser
denial of service
vulnerability

EPSS

0.002

Percentile

64.5%

An uncontrolled resource consumption vulnerability was found in socket.io-parser. If an attacker crafts a packet with a very large payload length, this can cause the parser to consume an ever-increasing amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

EPSS

0.002

Percentile

64.5%