Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-1010266 →
DEBIAN-CVE-2019-1010266
lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler....
Description d'origine
La description telle que publiée par la source (souvent en anglais).
lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
node-lodash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.11+dfsg-1"}]}]
Debian:13
node-lodash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.11+dfsg-1"}]}]
Debian:14
node-lodash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.11+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org