PT-2017-6624 · Uro+1 · Uronode+1

Martin Prpič · Published 2017-09-20 · Updated 2019-11-25 · CVE-2015-2927

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions URONode versions prior to 1.0.5r3 node version 0.3.2

Description The issue allows remote attackers to cause a denial of service, resulting in bandwidth consumption.

Recommendations For node version 0.3.2, update to a version that contains a fix for this issue. For URONode versions prior to 1.0.5r3, update to version 1.0.5r3 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-2927

Affected Products

Uronode

Node

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2927 · Security Note
• http://openwall.com/lists/oss-security/2015/04/06/3 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777013 · Note
• https://support.f5.com/csp/article/K64462543?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1209781 · Note