Improper resource allocation In node-bn.js
Description
bn.js affected by an infinite loop This affects versions of the package bn.js before 4.12.3 and 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | - | ||
debian 12 | - | ||
debian 14 | 5.2.3+~5.2.0-1 | ||
 npm | 4.12.3, 5.2.3 | ||
debian 13 | - | ||
 rpm rhel8 | - | - | |
rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel8 | - | - | |
rpm rhel9 | - | - |
1-10 of 11
10
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6. 7.