NVD

Id
34627  
Name
CVE-2014-7191  
Description
The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-10-18  
Modified Date
2017-01-06  
Seq
2014-7191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178535 34627 CVE-2014-7191 62170  View
178536 34627 CVE-2014-7191 http://www-01.ibm.com/support/docview.wss?uid=swg21685987  View
178537 34627 CVE-2014-7191 http://www-01.ibm.com/support/docview.wss?uid=swg21687263  View
178538 34627 CVE-2014-7191 http://www-01.ibm.com/support/docview.wss?uid=swg21687928  View
178539 34627 CVE-2014-7191 nodejs-cve20147191-dos(96729)  View
178540 34627 CVE-2014-7191 RHSA-2016:1380  View
178541 34627 CVE-2014-7191 https://github.com/raymondfeng/node-querystring/commit/43a604b7847e56bba49d0ce3e222fe89569354d8  View
178542 34627 CVE-2014-7191 https://github.com/visionmedia/node-querystring/issues/104  View
178543 34627 CVE-2014-7191 https://nodesecurity.io/advisories/qs_dos_memory_exhaustion  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16126 JVNDB-2014-005001 Node.js の qs モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Node.js の qs モジュールは、配列データに対して圧縮機能を呼び出さないため、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2014-7191 74483 CVE-2014-7191 34627 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005001.html 2014-08-06 2014-11-27 View