CVE-2018-3738
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD
Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Affected (1)
Products: Protobufjs Project: Protobufjs
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 6.8.5 |
Related CWEs
CWE-185
Incorrect Regular Expression
The product specifies a regular expression in a way that causes data to be improperly matched or compared.
CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Timeline
No history available yet.