CVE-2016-10542CWE-400

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455"

published May 31, 2018

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07424 · 94.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-05-31T20:00Z
EPSS history
Timeline
  • 31 MAY 20:00Z
    ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455"
    cvelistv5