CVE-2016-10518

描述

A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but internally ws always transforms all data that we need to send to a Buffer instance and that is where the vulnerability existed. ws didn't do any checks for the type of data it was sending. With buffers in node when you allocate it when a number instead of a string it will allocate the amount of bytes.

如何修補 CVE-2016-10518

要修補 CVE-2016-10518,請將受影響套件升級到下列已修補版本。

• —升級至 1.0.1+ds1.e6ddaae4-1 或更新版本
• —升級至 1.0.1 或更新版本

CVE-2016-10518 正在被利用嗎?

低 — EPSS 為 2.0%,目前沒有觀察到大規模利用活動。

受影響套件(2)

• from 0, < 1.0.1+ds1.e6ddaae4-1
• from 0, < 1.0.1

CVSS 分數

參考連結(7)

• ADVISORYgithub.com/advisories/GHSA-2mhh-w6q8-5hxw
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2016-10518
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2016-10518
• WEBgist.github.com/c0nrad/e92005446c480707a74a
• WEB