Denial of service in https-proxy-agent



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2018-3739
CWE-ID CWE-401
CWE-400
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 https-proxy-agent
Web applications / Other software

Vendor npm Inc.

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Resource exhaustion

EUVDB-ID: #VU14225

Risk: Low

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-3739

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information or cause DoS condition on the target system.

The vulnerability exists due to improper sanitization of the auth option passed to the Buffer() constructor. A remote attacker can submit a malicious input to the auth paramete, consume excessive CPU resources and cause the service to crash or trigger memory leak to gain access to arbitrary data.

Mitigation

Update to version 2.2.0 or later.

Vulnerable software versions

https-proxy-agent: 2.1.1

CPE2.3 External links

https://github.com/TooTallNate/node-https-proxy-agent/commit/1c24219df87524e6ed973127e81f30801d658f0...


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###