Asymmetric denial of service - ReDoS In devhelp
Description
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:0.12-11.el5 | ||
rpm rhel5 | 0:2.16.0-15.el5 | ||
rpm rhel5 | 0:1.5.0.12-1.el5 | ||
rpm rhel5 | 0:1.5.0.12-1.el5 |
Aliases
1. 2. 3.
References
1.