Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-10542.
PoCs published by Ryan Knell, Sonatype Security Research, Nick Starke, Sonatype Security Research, including Metasploit module auxiliary/dos/http/ws_dos.
AI-analyzed exploit summary This Metasploit module exploits a Denial of Service (DoS) vulnerability in the npm 'ws' module by sending a crafted WebSocket upgrade request with a malicious 'Sec-WebSocket-Extensions' header value. The exploit triggers a crash in the target service by including the string 'constructor' in the header.
Description
ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.
Exploits (1)
This Metasploit module exploits a Denial of Service (DoS) vulnerability in the npm 'ws' module by sending a crafted WebSocket upgrade request with a malicious 'Sec-WebSocket-Extensions' header value. The exploit triggers a crash in the target service by including the string 'constructor' in the header.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H