Red Hat Security AdvisoryRHSA-2017:2672
rh-nodejs6-nodejs-qs security update
Released 2017-09-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-nodejs6-nodejs-qs-6.2.3-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs6-nodejs-qs-6.2.3-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-nodejs6-nodejs-qs-6.2.3-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-nodejs6-nodejs-qs-6.2.3-1.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-nodejs6-nodejs-qs-6.2.3-1.el6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs6-nodejs-qs-6.2.3-1.el7
Fixes 1 record
Priority LOW 37
the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02415 · Published 2017-07-13 · Partial fix · 6.0.4, 6.1.2 +2 CWE-20
