The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception.
References
| Link | Resource |
|---|---|
| https://github.com/paulvarache/restify-paginate/ | Product Third Party Advisory |
| https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginate | Exploit Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210401-0002/ | Third Party Advisory |
| https://www.npmjs.com/package/restify-paginate | Product Third Party Advisory |
| https://github.com/paulvarache/restify-paginate/ | Product Third Party Advisory |
| https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginate | Exploit Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210401-0002/ | Third Party Advisory |
| https://www.npmjs.com/package/restify-paginate | Product Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/paulvarache/restify-paginate/ - Product, Third Party Advisory | |
| References | () https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginate - Exploit, Patch, Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20210401-0002/ - Third Party Advisory | |
| References | () https://www.npmjs.com/package/restify-paginate - Product, Third Party Advisory |
Information
Published : 2021-02-25 17:15
Updated : 2024-11-21 05:21
NVD link : CVE-2020-27543
Mitre link : CVE-2020-27543
CVE.ORG link : CVE-2020-27543
JSON object : View
Products Affected
restify-paginate_project
- restify-paginate
CWE
CWE-755
Improper Handling of Exceptional Conditions