Oval Definition:oval:com.ubuntu.bionic:def:20164055000
Revision Date:2017-01-23Version:1
Title:CVE-2016-4055 on Ubuntu 18.04 LTS (bionic) - medium.
Description:The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-4055
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND NOT While related to the CVE in some way, the 'node-moment' package in bionic is not affected (note: '2.20.1+ds-1').
    • BACK