fkie_cve-2024-37890
Vulnerability from fkie_nvd
Published
2024-06-17 20:15
Modified
2024-11-21 09:24
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.
References
security-advisories@github.comhttps://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
security-advisories@github.comhttps://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
security-advisories@github.comhttps://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
security-advisories@github.comhttps://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
security-advisories@github.comhttps://github.com/websockets/ws/issues/2230
security-advisories@github.comhttps://github.com/websockets/ws/pull/2231
security-advisories@github.comhttps://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
security-advisories@github.comhttps://nodejs.org/api/http.html#servermaxheaderscount
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/issues/2230
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/pull/2231
af854a3a-2127-422b-91ae-364da2661108https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
af854a3a-2127-422b-91ae-364da2661108https://nodejs.org/api/http.html#servermaxheaderscount
Impacted products
Vendor Product Version


To clipboard 

{
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.",
      },
      {
         lang: "es",
         value: "ws es un cliente y servidor WebSocket de código abierto para Node.js. Una solicitud con una cantidad de encabezados que exceda el umbral server.maxHeadersCount podría usarse para bloquear un servidor ws. La vulnerabilidad se solucionó en ws@8.17.1 (e55e510) y se actualizó a ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3) y ws@5.2.4 (4abd8f6). En versiones vulnerables de ws, el problema se puede mitigar de las siguientes maneras: 1. Reduzca la longitud máxima permitida de los encabezados de solicitud usando las opciones --max-http-header-size=size y/o maxHeaderSize para que no haya más Se pueden enviar encabezados superiores al límite server.maxHeadersCount. 2. Establezca server.maxHeadersCount en 0 para que no se aplique ningún límite.",
      },
   ],
   id: "CVE-2024-37890",
   lastModified: "2024-11-21T09:24:28.810",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.6,
            source: "security-advisories@github.com",
            type: "Secondary",
         },
      ],
   },
   published: "2024-06-17T20:15:13.203",
   references: [
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/issues/2230",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/pull/2231",
      },
      {
         source: "security-advisories@github.com",
         url: "https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q",
      },
      {
         source: "security-advisories@github.com",
         url: "https://nodejs.org/api/http.html#servermaxheaderscount",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/issues/2230",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/pull/2231",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://nodejs.org/api/http.html#servermaxheaderscount",
      },
   ],
   sourceIdentifier: "security-advisories@github.com",
   vulnStatus: "Awaiting Analysis",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-476",
            },
         ],
         source: "security-advisories@github.com",
         type: "Secondary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.