ASA-202505-7 - log back

ASA-202505-7 edited at 20 May 2025 19:18:41
ASA-202505-7 edited at 18 May 2025 23:44:13
Impact
- A remote attacker can exploit memory management flaws in Node.js to exhaust system resources or crash the process, leading to a denial of service. Specifically, repeatedly invoking file system APIs with crafted input may cause unbounded memory growth, while malformed data in cryptographic operations may crash the runtime.
+ A remote attacker can exploit improper error handling and memory management flaws in Node.js to crash the process or exhaust system resources, leading to a denial of service. Specifically, malformed input may trigger a crash in asynchronous cryptographic operations, while repeated use of file system APIs with crafted input may cause unbounded memory growth.
ASA-202505-7 edited at 18 May 2025 23:39:22
Impact
+ A remote attacker can exploit memory management flaws in Node.js to exhaust system resources or crash the process, leading to a denial of service. Specifically, repeatedly invoking file system APIs with crafted input may cause unbounded memory growth, while malformed data in cryptographic operations may crash the runtime.
ASA-202505-7 created at 18 May 2025 23:32:35