CVE-2017-20165

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-20165
A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

2.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 5.1 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 Patch
https://github.com/debug-js/debug/pull/504 Patch
https://github.com/debug-js/debug/releases/tag/3.1.0 Release Notes
https://vuldb.com/?ctiid.217665 Third Party Advisory VDB Entry
https://vuldb.com/?id.217665 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*
cpe:2.3:a:debug_project:debug:*:*:*:*:*:node.js:*:*
History

11 Apr 2024, 00:58

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en debug-js debug hasta 3.0.x y ha sido clasificada como problemática. Esto afecta la función useColors del archivo src/node.js. La manipulación del argumento str conduce a una complejidad de expresión regular ineficiente. La actualización a la versión 3.1.0 puede solucionar este problema. El identificador del parche es c38a0166c266a679c8de012d4eaccec3f944e685. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-217665.

24 Oct 2023, 19:24

Type Values Removed Values Added
CWE CWE-1333

20 Oct 2023, 12:15

Type Values Removed Values Added
CWE CWE-1333
Summary A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The name of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability. A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.
Information

Published : 2023-01-09 10:15

Updated : 2024-05-17 01:17

NVD link : CVE-2017-20165

Mitre link : CVE-2017-20165

CVE.ORG link : CVE-2017-20165

JSON object : View

Products Affected

debug_project

  • debug
CWE
CWE-1333

Inefficient Regular Expression Complexity