CVE-2017-20165

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-20165

3.5 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

2.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 5.1 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

A

vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.

References
Link Resource
https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 Patch
https://github.com/debug-js/debug/pull/504 Patch
https://github.com/debug-js/debug/releases/tag/3.1.0 Release Notes
https://vuldb.com/?ctiid.217665 Third Party Advisory VDB Entry
https://vuldb.com/?id.217665 Third Party Advisory VDB Entry
https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 Patch
https://github.com/debug-js/debug/pull/504 Patch
https://github.com/debug-js/debug/releases/tag/3.1.0 Release Notes
https://vuldb.com/?ctiid.217665 Third Party Advisory VDB Entry
https://vuldb.com/?id.217665 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*
cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*
History

21 Nov 2024, 03:22

Type Values Removed Values Added
CVSS v2 : 2.7
v3 : 7.5 		v2 : 2.7
v3 : 3.5
References () https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 - Patch () https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 - Patch
References () https://github.com/debug-js/debug/pull/504 - Patch () https://github.com/debug-js/debug/pull/504 - Patch
References () https://github.com/debug-js/debug/releases/tag/3.1.0 - Release Notes () https://github.com/debug-js/debug/releases/tag/3.1.0 - Release Notes
References () https://vuldb.com/?ctiid.217665 - Third Party Advisory, VDB Entry () https://vuldb.com/?ctiid.217665 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.217665 - Third Party Advisory, VDB Entry () https://vuldb.com/?id.217665 - Third Party Advisory, VDB Entry
Information

Published : 2023-01-09 10:15

Updated : 2024-11-21 03:22

NVD link : CVE-2017-20165

Mitre link : CVE-2017-20165

CVE.ORG link : CVE-2017-20165

JSON object : View

Products Affected

debug_project

CWE
CWE-1333

Inefficient Regular Expression Complexity