7.5high
CVE-2018-7167
Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service.
Published 8 y ago · modified 30 d ago · JSON
CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
6.7%
percentile 94%
Public exploits
0
none known
Summary
Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS "Boron"), 8.x (LTS "Carbon"), and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 30 d ago
Exploit prediction (EPSS)
6.69% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- The Node.js Project Node.js
Classification
- Weakness
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- Technology feeds
- Node.js (RSS, critical only)
References
- securityfocus.com /bid/106363 · vdb-entry, x_refsource_BID, x_transferred
- nodejs.org /en/blog/vulnerability/june-2018-security-releases/ · x_refsource_CONFIRM, x_transferred
- security.gentoo.org /glsa/202003-48 · vendor-advisory, x_refsource_GENTOO, x_transferred
Sources
- CVE List: CVE-2018-7167
- NVD: CVE-2018-7167
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.