CVE-2014-10064

The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example, in a web application, other requests would not be processed while this blocking is occurring.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://nodesecurity.io/advisories/28	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:qs_project:qs:*:*:*:*:*:node.js:*:*

History

No history.

Information

Published : 2018-05-31 20:29

Updated : 2024-02-28 16:25

NVD link : CVE-2014-10064

Mitre link : CVE-2014-10064

CVE.ORG link : CVE-2014-10064

JSON object : View

Products Affected

qs_project

qs

CWE

CWE-399

Resource Management Errors

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2014-10064", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-05-31T20:29:00.220", "references": [{"url": "https://nodesecurity.io/advisories/28", "tags": ["Third Party Advisory"], "source": "support@hackerone.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}, {"type": "Secondary", "source": "support@hackerone.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example, in a web application, other requests would not be processed while this blocking is occurring."}, {"lang": "es", "value": "El m\u00f3dulo qs en versiones anteriores a la 1.0.0 no tiene una opci\u00f3n o configuraci\u00f3n por defecto para especificar la profundidad del objeto y, al analizar una cadena que representa un objeto profundamente anidado, bloquear\u00e1 el bucle de eventos durante largos per\u00edodos de tiempo. Un atacante podr\u00eda aprovecharse de esto para provocar una condici\u00f3n de denegaci\u00f3n de servicio (DoS), por ejemplo, en una aplicaci\u00f3n web; otras peticiones no se procesar\u00edan mientras ocurre este bloqueo."}], "lastModified": "2019-10-09T23:09:44.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qs_project:qs:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "9380A9BB-F9DF-43D5-AA81-DBFA67DE2CC9", "versionEndExcluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "support@hackerone.com"}