This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-16119 →

UBUNTU-CVE-2017-16119

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service whe...

Original description

The description as published by the source.

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Ubuntu:16.04:LTS node-fresh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:18.04:LTS node-fresh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

report ubuntu.com
report nodesecurity.io
report cve.org