Security Advisory

CVE-2018-3739

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-07 02:00:00

Last updated 2024-09-17 04:25:44

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON).

← Browse all CVEs View on cve.org ↗