CVE-2015-9242CWE-400

Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception

published May 29, 2018

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02061 · 81.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-05-29T20:00Z
EPSS history
Timeline
  • 29 MAY 20:00Z
    Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception
    cvelistv5