CVE-2023-26103 - OpenCVE

Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form of /s*,s*/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to significantly slow down a web socket server.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Deno	Deno

Configuration 1 [-]

cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/denoland/deno/blob/2b247be517d789a37e532849e2e40b724af0918f/ext/http/01_http.js%23L395-L409	Broken Link
https://github.com/denoland/deno/commit/cf06a7c7e672880e1b38598fe445e2c50b4a9d06	Patch
https://github.com/denoland/deno/pull/17722	Patch
https://github.com/denoland/deno/releases/tag/v1.31.0	Release Notes
https://security.snyk.io/vuln/SNYK-RUST-DENO-3315970	Exploit Technical Description Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: snyk

Published: 2023-02-25T05:00:01.387Z

Updated: 2023-02-25T05:00:01.387Z

Reserved: 2023-02-20T10:28:48.921Z

Link: CVE-2023-26103

JSON object: View

NVD Information

Status : Modified

Published: 2023-02-25T05:15:12.343

Modified: 2023-11-07T04:09:20.403

Link: CVE-2023-26103

JSON object: View

Redhat Information

No data.

CWE

CWE-1333

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", "matchCriteriaId": "EFFBE1A2-4130-4E48-B807-89F14A2D0CE4", "versionEndExcluding": "1.31.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form of /s*,s*/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to significantly slow down a web socket server.\r\r"}], "id": "CVE-2023-26103", "lastModified": "2023-11-07T04:09:20.403", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "report@snyk.io", "type": "Secondary"}]}, "published": "2023-02-25T05:15:12.343", "references": [{"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/denoland/deno/blob/2b247be517d789a37e532849e2e40b724af0918f/ext/http/01_http.js%23L395-L409"}, {"source": "report@snyk.io", "tags": ["Patch"], "url": "https://github.com/denoland/deno/commit/cf06a7c7e672880e1b38598fe445e2c50b4a9d06"}, {"source": "report@snyk.io", "tags": ["Patch"], "url": "https://github.com/denoland/deno/pull/17722"}, {"source": "report@snyk.io", "tags": ["Release Notes"], "url": "https://github.com/denoland/deno/releases/tag/v1.31.0"}, {"source": "report@snyk.io", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://security.snyk.io/vuln/SNYK-RUST-DENO-3315970"}], "sourceIdentifier": "report@snyk.io", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1333"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-1333"}], "source": "report@snyk.io", "type": "Secondary"}]}