CVE-2021-27292
published 2021-03-17CVE-2021-27292: ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
3.37%
87.5th percentile
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | node-ua-parser-js | < node-ua-parser-js 0.7.24+ds-1 (bookworm) | node-ua-parser-js 0.7.24+ds-1 (bookworm) |
| ua-parser-js_project | ua-parser-js | >= 0.7.14 < 0.7.24 | 0.7.24 |
| ua-parser-js_project | ua-parser-js | >= 0.7.14 < 0.7.24 | 0.7.24 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Regular Expression Denial of Service (ReDoS) in ua-parser-js
ghsa·2021-05-06
CVE-2021-27292 [HIGH] CWE-400 Regular Expression Denial of Service (ReDoS) in ua-parser-js
Regular Expression Denial of Service (ReDoS) in ua-parser-js
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
OSV
Regular Expression Denial of Service (ReDoS) in ua-parser-js
osv·2021-05-06
CVE-2021-27292 [HIGH] Regular Expression Denial of Service (ReDoS) in ua-parser-js
Regular Expression Denial of Service (ReDoS) in ua-parser-js
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
OSV
CVE-2021-27292: ua-parser-js >= 0
osv·2021-03-17·CVSS 7.5
CVE-2021-27292 [HIGH] CVE-2021-27292: ua-parser-js >= 0
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Red Hat
nodejs-ua-parser-js: ReDoS via malicious User-Agent header
vendor_redhat·2021-02-11·CVSS 7.5
CVE-2021-27292 [HIGH] CWE-400 nodejs-ua-parser-js: ReDoS via malicious User-Agent header
nodejs-ua-parser-js: ReDoS via malicious User-Agent header
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
A regular expression denial of service (ReDoS) vulnerability was found in the npm library `ua-parser-js`. If a supplied user agent matches the `Noble` string and contains many spaces then the regex will conduct backtracking, taking an ever increasing amount of time depending on the number of spaces supplied. An attacker can use this vulnerability to potentially craft a malicious user agent resulting in a denial of service.
Statement: While some components do package a vulnerable version of ua-parse
Debian
CVE-2021-27292: node-ua-parser-js - ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vuln...
vendor_debian·2021·CVSS 7.5
CVE-2021-27292 [HIGH] CVE-2021-27292: node-ua-parser-js - ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vuln...
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Scope: local
bookworm: resolved (fixed in 0.7.24+ds-1)
bullseye: resolved (fixed in 0.7.24+ds-1)
forky: resolved (fixed in 0.7.24+ds-1)
sid: resolved (fixed in 0.7.24+ds-1)
trixie: resolved (fixed in 0.7.24+ds-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14
2021-03-17
Published