CVE-2016-4055 in Primavera Unifier

Summary

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

04/20/2016

Disclosure

01/22/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
121586	Oracle Primavera Unifier Moment resource management	399	Not defined	Official fix	CVE-2016-4055
95830	moment Package Regex duration resource management	399	Not defined	Official fix	CVE-2016-4055

Sources

• MITRE
• NVD
• CVE Details