{
"id": "GHSA-m5pg-8h68-j225",
"aliases": [
"CVE-2020-8277"
],
"details": "A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.",
"summary": "Uncontrolled Resource Consumption in node",
"affected": [],
"modified": "2021-12-03T21:10:24Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"published": "2021-04-14T21:47:46Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8277",
"type": "ADVISORY"
},
{
"url": "https://hackerone.com/reports/1033107",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected] /message/A7WH7W46OZSEUHWBHD7TCH3LRFY52V6Z",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected] /message/BEJBY3RJB3XWUOJFGZM5E3EMQ7MFM3UT",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected] /message/EEIV4CH6KNVZK63Y6EKVN2XDW7IHSJBJ",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected] /message/VXLJY4764LYVJPC7NCDLE2UMQ3QC5OI2",
"type": "WEB"
},
{
"url": "https://nodejs.org/en/blog/vulnerability/november-2020-security-releases",
"type": "WEB"
},
{
"url": "https://security.gentoo.org/glsa/202012-11",
"type": "WEB"
},
{
"url": "https://security.gentoo.org/glsa/202101-07",
"type": "WEB"
},
{
"url": "https://www.oracle.com//security-alerts/cpujul2021.html",
"type": "WEB"
},
{
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"type": "WEB"
},
{
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"type": "WEB"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2021.html",
"type": "WEB"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
"nvd_published_at": "2020-11-19T01:15:00Z",
"github_reviewed_at": null
}
}