Skip to content
OpenAdvisories
Critical · 9.1 CVE-2018-3767 EUVD-2018-0585GHSA-cx8m-8xmx-q8v3

Denial of Service in memjs

Published Jul 5, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

`memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.

Affected products

VendorProductAffectedFixed
https://github.com/memcachier memjs Not fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm memjs <= 1.2.0 — GHSA-cx8m-8xmx-q8v3

References