CVE-2022-25927

2023-01-2600:00:00

ubuntu.com

cve-2022-25927

regular expression denial of service

trim function

unix

package vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

38.4%

JSON

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from
0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of
Service (ReDoS) via the trim() function.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchnode-ua-parser-js< anyUNKNOWN
ubuntu20.04noarchnode-ua-parser-js< anyUNKNOWN
ubuntu22.04noarchnode-ua-parser-js< anyUNKNOWN
ubuntu24.04noarchnode-ua-parser-js< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	node-ua-parser-js	< any	UNKNOWN
ubuntu	20.04	noarch	node-ua-parser-js	< any	UNKNOWN
ubuntu	22.04	noarch	node-ua-parser-js	< any	UNKNOWN
ubuntu	24.04	noarch	node-ua-parser-js	< any	UNKNOWN