PT-2023-12132
CVE-2021-29057
·
Published
2023-08-11
·
Updated
2023-08-21
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SUCHMOKUO node-worker-threads-pool version 1.4.3
Description
An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool, allowing attackers to cause a denial of service. This issue can be mitigated by manually creating a timeout.
Recommendations
For version 1.4.3, consider creating a timeout when using the StaticPool to mitigate the risk of denial of service, for example by using the
setTimeout method on the executor, as shown in the provided example code.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾