CVE-2016-10542 | BDVDB-2026-101344 Detail

HackerOnews node module

Description#

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-400 Uncontrolled Resource Consumption

References#

https://github.com/nodejs/node/issues/7388
https://nodesecurity.io/advisories/120

Exploit#

No public exploit known

History#

Version 12018-05-31Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.