CVE-2018-20164

An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0

published February 13, 2019

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to a value containing a long digit string. (The UAP-Core project contains the vulnerability, propagating to all implementations.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03298 · 88.4th percentile
Published
2019-02-13T14:00Z
EPSS history
Timeline
  • 13 FEB 14:00Z
    An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0
    cvelistv5