Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-7693
PUBLISHED
More InfoOfficial Page
Assigner-snyk
Assigner Org ID-bae035ff-b466-4ff4-94d0-fc9efd9e1730
View Known Exploited Vulnerability (KEV) details
Published At-09 Jul, 2020 | 13:20
Updated At-17 Sep, 2024 | 00:16
Rejected At-
▼CVE Numbering Authority (CNA)
Denial of Service (DoS)

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

Affected Products
Vendor
n/a
Product
sockjs
Versions
Affected
  • From unspecified before 0.3.20 (custom)
Problem Types
TypeCWE IDDescription
textN/ADenial of Service (DoS)
Type: text
CWE ID: N/A
Description: Denial of Service (DoS)
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Andrew Snow
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
x_refsource_MISC
https://github.com/sockjs/sockjs-node/issues/252
x_refsource_MISC
https://github.com/sockjs/sockjs-node/pull/265
x_refsource_MISC
https://github.com/andsnw/sockjs-dos-py
x_refsource_MISC
https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
Resource:
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
Resource:
x_refsource_MISC
Hyperlink: https://github.com/sockjs/sockjs-node/issues/252
Resource:
x_refsource_MISC
Hyperlink: https://github.com/sockjs/sockjs-node/pull/265
Resource:
x_refsource_MISC
Hyperlink: https://github.com/andsnw/sockjs-dos-py
Resource:
x_refsource_MISC
Hyperlink: https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
x_refsource_MISC
x_transferred
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
x_refsource_MISC
x_transferred
https://github.com/sockjs/sockjs-node/issues/252
x_refsource_MISC
x_transferred
https://github.com/sockjs/sockjs-node/pull/265
x_refsource_MISC
x_transferred
https://github.com/andsnw/sockjs-dos-py
x_refsource_MISC
x_transferred
https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/sockjs/sockjs-node/issues/252
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/sockjs/sockjs-node/pull/265
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/andsnw/sockjs-dos-py
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
Resource:
x_refsource_MISC
x_transferred
Details not found