CVE-2017-16014 Insufficient Error Handling in http-proxy
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm http-proxy(npm) | <= 0.6.6 | No fix listed |
| http-proxy project http-proxy | < 0.7.0 | 0.7.0 |
| HackerOne http-proxy node module | = <=0.6.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com issue-tracking patch third-party-advisory
- github.com
- www.npmjs.com
- nodesecurity.io third-party-advisory
- Debian Security Tracker CVE-2017-16014 vendor-advisory