CVE-2017-16111
NONE EPSS 62.0%
Published Jun 7, 20188y ago · Modified Jun 17, 20262w ago
Published Jun 7, 2018 8y ago
Last Modified Jun 17, 2026 2w ago
Description
The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header.
Threat Intelligence
EPSS Exploit Probability
62.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-400 Uncontrolled Resource Consumption Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| content_project | content | * | ≤3.0.5 |
References 1
- nodesecurity.io https://nodesecurity.io/advisories/530
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.