Lucene search
Ubuntu.comUB:CVE-2022-37603HistoryOct 14, 2022 - 12:00 a.m.
CVE-2022-37603
2022-10-1400:00:00
ubuntu.com
ubuntu.com
30
regular expression denial of service
webpack loader-utils
interpolatename
cve-2022-37603
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.007 Low
EPSS
Percentile
80.3%
A Regular expression denial of service (ReDoS) flaw was found in Function
interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the
url variable in interpolateName.js.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | node-loader-utils | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | node-loader-utils | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | node-loader-utils | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | node-loader-utils | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | node-loader-utils | < any | UNKNOWN |
Related
ibm
ibm
github
github
prion
prion
Denial of service
2022-10-14 16:15:00
osv
osv
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable
2022-10-14 19:00:38
CVE-2022-37603
2022-10-14 16:15:12
nvd
nvd
CVE-2022-37603
2022-10-14 16:15:12
cve
cve
CVE-2022-37603
2022-10-14 16:15:12
cvelist
cvelist
CVE-2022-37603
2022-10-14 00:00:00
debiancve
debiancve
CVE-2022-37603
2022-10-14 16:15:12
redhatcve
redhatcve
CVE-2022-37603
2022-11-07 10:56:15
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-10-16 21:39:10
nessus
nessus
Fedora 38 : yarnpkg (2023-2e38c3756f)
2023-03-30 00:00:00
Fedora 36 : yarnpkg (2023-a4f0b29f6c)
2023-03-30 00:00:00
Fedora 37 : yarnpkg (2023-86d75130fe)
2023-03-29 00:00:00
redhat
redhat
(RHSA-2023:3374) Moderate: Migration Toolkit for Runtimes security update
2023-05-31 10:49:43
(RHSA-2023:0713) Important: Red Hat Data Grid 8.4.1 security update
2023-02-09 11:33:55
(RHSA-2023:0471) Important: Migration Toolkit for Runtimes security update
2023-01-26 12:13:39
fedora
fedora
[SECURITY] Fedora 37 Update: yarnpkg-1.22.19-5.fc37
2023-03-30 01:21:37
[SECURITY] Fedora 38 Update: yarnpkg-1.22.19-5.fc38
2023-03-30 00:23:16
[SECURITY] Fedora 36 Update: yarnpkg-1.22.19-5.fc36
2023-03-30 01:16:12
openvas
openvas
Fedora: Security Advisory for yarnpkg (FEDORA-2023-a4f0b29f6c)
2023-03-31 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2023-86d75130fe)
2023-03-31 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2023-2e38c3756f)
2023-03-30 00:00:00
redos
redos
ROS-20240704-07
2024-07-04 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.007 Low
EPSS
Percentile
80.3%
Related for UB:CVE-2022-37603