Lucene search
Veracode Vulnerability DatabaseVERACODE:29751HistoryMar 18, 2021 - 4:30 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-03-1804:30:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.002 Low
EPSS
Percentile
64.6%
ua-parser-js is vulnerable to regular expression denial of service. An attacker is able to exploit the vulnerability by sending a malicious User-Agent header under the device type causing the system to process the header for an extended period of time.
Related
ubuntucve
ubuntucve
CVE-2021-27292
2021-03-17 00:00:00
osv
osv
CVE-2021-27292
2021-03-17 13:15:15
Regular Expression Denial of Service (ReDoS) in ua-parser-js
2021-05-06 16:11:13
cvelist
cvelist
CVE-2021-27292
2021-03-17 12:34:48
cve
cve
CVE-2021-27292
2021-03-17 13:15:15
debiancve
debiancve
CVE-2021-27292
2021-03-17 13:15:15
github
github
Regular Expression Denial of Service (ReDoS) in ua-parser-js
2021-05-06 16:11:13
nodejs
nodejs
Regular Expression Denial of Service
2021-05-06 16:15:15
nvd
nvd
CVE-2021-27292
2021-03-17 13:15:15
prion
prion
Design/Logic Flaw
2021-03-17 13:15:00
redhatcve
redhatcve
CVE-2021-27292
2022-05-07 14:19:14
redhat
redhat
ibm
ibm
kitploit
kitploit
nessus
nessus
Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)
2024-05-02 00:00:00