CVE-2023-24807

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normalize the values in the `headerValueNormalize()` utility function. This vulnerability was patched in v5.19.1. No known workarounds are available.

CVSS v3.0 7.5 HIGH

7.5^/10

CVSS v3.0 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/nodejs/undici/releases/tag/v5.19.1	Release Notes
https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w	Vendor Advisory
https://hackerone.com/bugs?report_id=1784449	Permissions Required Third Party Advisory
https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf	Patch

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*

Information

Published : 2023-02-16 10:15

Updated : 2023-02-24 10:38

NVD link : CVE-2023-24807

Mitre link : CVE-2023-24807

JSON object : View

CWE

CWE-1333

Inefficient Regular Expression Complexity

Advertisement

Products Affected

nodejs

undici

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/nodejs/undici/releases/tag/v5.19.1", "name": "https://github.com/nodejs/undici/releases/tag/v5.19.1", "tags": ["Release Notes"], "refsource": "MISC"}, {"url": "https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w", "name": "https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://hackerone.com/bugs?report_id=1784449", "name": "https://hackerone.com/bugs?report_id=1784449", "tags": ["Permissions Required", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf", "name": "https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf", "tags": ["Patch"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normalize the values in the `headerValueNormalize()` utility function. This vulnerability was patched in v5.19.1. No known workarounds are available."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-1333"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-24807", "ASSIGNER": "security-advisories@github.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}}, "publishedDate": "2023-02-16T18:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "5.19.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-02-24T18:38Z"}