Lucene search
Veracode Vulnerability DatabaseVERACODE:30703HistoryMay 27, 2021 - 5:47 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-05-2705:47:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25
regular expression
denial of service
vulnerability
ws" software
cpu consumption
application crash
malicious value
EPSS
0.002
Percentile
60.7%
ws is vulnerable to regular expression denial of service. An attacker is able to cause excessive CPU consumption that can lead to an application crash by submitting a malicious value of Sec-Websocket-Protocol.
References
github.com/websockets/ws/commit/00c425ec77993773d823f018f64a5c44e17023ff
github.com/websockets/ws/security/advisories/GHSA-6fc8-4gx4-v693
lists.apache.org/thread.html/rdfa7b6253c4d6271e31566ecd5f30b7ce1b8fb2c89d52b8c4e0f4e30@%3Ccommits.tinkerpop.apache.org%3E
security.netapp.com/advisory/ntap-20210706-0005/
Related
redhatcve
redhatcve
CVE-2021-32640
2021-05-28 00:47:56
ubuntucve
ubuntucve
CVE-2021-32640
2021-05-25 00:00:00
cvelist
cvelist
CVE-2021-32640 ReDoS in Sec-Websocket-Protocol header
2021-05-25 18:25:09
osv
osv
CVE-2021-32640
2021-05-25 19:15:07
ReDoS in Sec-Websocket-Protocol header
2021-05-28 19:19:03
debiancve
debiancve
CVE-2021-32640
2021-05-25 19:15:07
nvd
nvd
CVE-2021-32640
2021-05-25 19:15:07
cve
cve
CVE-2021-32640
2021-05-25 19:15:07
hackerone
hackerone
Reddit: Regular Expression Denial of Service vulnerability
2022-04-12 00:53:45
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-05-29 15:41:49
prion
prion
Cross site request forgery (csrf)
2021-05-25 19:15:00
github
github
ReDoS in Sec-Websocket-Protocol header
2021-05-28 19:19:03
nodejs
nodejs
Regular Expression Denial of Service
2021-05-28 19:31:06
ibm
ibm