VDB
CVE-2017-20165
CVE-2017-20165
PUBLISHED
A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.
EPSS 1.58% · 81.9th percentile
Risk Scores
EPSS Score
1.58%
81.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | node-debug | 0, * |
| Ubuntu:18.04:LTS | node-debug | 0, 2.5.1-2, 3.1.0-1 |
Exploit Intelligence
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc-repo)
- Fork of the send module to deal with CVE-2017-20165 (github-poc)
…and 13 more exploits
Timeline
- Jan 9, 2023 CVE Published
- Jan 10, 2023 EPSS Score
- Feb 2, 2023 CVE Updated
- Feb 20, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 13, 2023 EPSS Score
- Aug 3, 2023 EPSS Score
- Sep 13, 2023 EPSS Score
- Dec 3, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Apr 4, 2024 EPSS Score
- May 15, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-20165 third-party-advisory
- https://github.com/debug-js/debug/pull/504 third-party-advisory
- https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-20165 third-party-advisory