Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2017-20165

Good to know:

icon
icon

Date: January 9, 2023

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.

Language: JS

Severity Score

Related Resources (10)

https://vuldb.com/?id.217665
https://github.com/debug-js/debug/releases/tag/2.6.9
https://github.com/debug-js/debug/commit/f53962e944a87e6ca9bb622a2a12dffc22a9bb5a
https://github.com/debug-js/debug/pull/504
https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685
https://github.com/debug-js/debug/releases/tag/3.1.0
https://nvd.nist.gov/vuln/detail/CVE-2017-20165
https://github.com/debug-js/debug
https://vuldb.com/?ctiid.217665
https://www.mend.io/vulnerability-database/CVE-2017-20165

Severity Score

Weakness Type (CWE)

Inefficient Regular Expression Complexity

CWE-1333

Top Fix

icon

Upgrade Version

Upgrade to version debug - 2.6.9,3.1.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): ADJACENT_NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): ADJACENT
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us