CVE-2018-3737
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Original description
The description as published by the source.
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-3737 node-sshpk Fixed in: 1.13.1+dfsg-2
References
- report hackerone.com