VULNERABILITY INTELLIGENCE

CVE-2015-9242

CVSS score7.5 HIGH
EPSS probability2.06%
CISA KEVNot currently listed
Published2018-05-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-400: Uncontrolled Resource Consumption

Primary references