CVE-2017-15010
Fixed in a distro release EPSS 3%
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.
Products: salesforce tough-cookie
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | tough-cookie | 2.3.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | node-tough-cookie | 2.3.4+dfsg-1 |
| Debian 13 | node-tough-cookie | 2.3.4+dfsg-1 |
| Debian 14 | node-tough-cookie | 2.3.4+dfsg-1 |
| Red Hat mobile application platform 4.6 | fh-system-dump-tool | 0:1.0.0-5.el7 |
| Red Hat mobile application platform 4.6 | fping | 0:3.10-4.el7map |
| Red Hat mobile application platform 4.6 | fping-debuginfo | 0:3.10-4.el7map |
| Red Hat mobile application platform 4.6 | nagios | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.6 | nagios-common | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.6 | nagios-debuginfo | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.6 | nagios-devel | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-all | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-apt | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-breeze | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-by_ssh | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-cluster | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-dbi | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-debuginfo | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-dhcp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-dig | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-disk | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-disk_smb | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-dns | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-dummy | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-file_age | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-flexlm | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-fping | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-game | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-hpjd | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-http | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-icmp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ide_smart | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ifoperstatus | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ifstatus | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ircd | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ldap | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-load | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-log | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-mailq | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-mrtg | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-mrtgtraf | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-mysql | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-nagios | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-nt | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ntp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ntp-perl | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-nwstat | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-oracle | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-overcr | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-perl | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-pgsql | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ping | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-procs | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-radius | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-real | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-rpc | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-sensors | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-smtp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-snmp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ssh | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-swap | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-tcp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-time | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-ups | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-uptime | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-users | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | nagios-plugins-wave | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.6 | perl-Crypt-CBC | 0:2.33-2.el7map |
| Red Hat mobile application platform 4.6 | perl-Crypt-DES | 0:2.05-20.el7map |
| Red Hat mobile application platform 4.6 | perl-Crypt-DES-debuginfo | 0:2.05-20.el7map |
| Red Hat mobile application platform 4.6 | perl-Net-SNMP | 0:6.0.1-7.el7map |
| Red Hat mobile application platform 4.6 | phantomjs | 0:1.9.7-3.el7map |
| Red Hat mobile application platform 4.6 | phantomjs-debuginfo | 0:1.9.7-3.el7map |
| Red Hat mobile application platform 4.6 | python-meld3 | 0:0.6.10-1.el7map |
| Red Hat mobile application platform 4.6 | python-meld3-debuginfo | 0:0.6.10-1.el7map |
| Red Hat mobile application platform 4.6 | qstat | 0:2.11-13.20080912svn311.el7map |
| Red Hat mobile application platform 4.6 | qstat-debuginfo | 0:2.11-13.20080912svn311.el7map |
| Red Hat mobile application platform 4.6 | radiusclient-ng | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.6 | radiusclient-ng-debuginfo | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.6 | radiusclient-ng-devel | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.6 | radiusclient-ng-utils | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.6 | redis | 0:2.8.21-2.el7map |
| Red Hat mobile application platform 4.6 | redis-debuginfo | 0:2.8.21-2.el7map |
| Red Hat mobile application platform 4.6 | rhmap-fh-openshift-templates | 0:4.6.0-5.el7 |
| Red Hat mobile application platform 4.6 | rhmap-mod_authnz_external | 0:3.3.1-7.el7map |
| Red Hat mobile application platform 4.6 | rhmap-mod_authnz_external-debuginfo | 0:3.3.1-7.el7map |
| Red Hat mobile application platform 4.6 | sendEmail | 0:1.56-2.el7 |
| Red Hat mobile application platform 4.6 | ssmtp | 0:2.64-14.el7map |
| Red Hat mobile application platform 4.6 | ssmtp-debuginfo | 0:2.64-14.el7map |
| Red Hat mobile application platform 4.6 | supervisor | 0:3.1.3-3.el7map |
| Red Hat rhel software collections 2 | rh-nodejs4-nodejs-tough-cookie | 0:2.3.3-2.el6 |
| Red Hat rhel software collections 2 | rh-nodejs4-nodejs-tough-cookie | 0:2.3.3-2.el7 |
| Red Hat rhel software collections 2 | rh-nodejs6-nodejs-tough-cookie | 0:2.3.3-1.el6 |
| Red Hat rhel software collections 2 | rh-nodejs6-nodejs-tough-cookie | 0:2.3.3-1.el7 |
| Ubuntu 18.04 LTS | node-tough-cookie | no fix |