CVE-2018-3767
CRITICALmemjs <= 1.1.0 - Denial of Service via Uncontrolled Resource Consumption
Title source: llmDescription
`memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://hackerone.com/reports/319809
Scores
CVSS v3
9.1
EPSS
0.0145
EPSS Percentile
70.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-400
Status
published
Products (2)
memcachier/memjs
< 1.1.0
npm/memjs
0npm
Published
Jul 05, 2018
Tracked Since
Feb 18, 2026