Vulnerabilities > CVE-2023-32695 - Improper Check for Unusual or Exceptional Conditions vulnerability in Socket Socket.Io-Parser

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

socket

CWE-754

NVD

Published: 2023-05-27

Updated: 2023-06-05

Summary

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3.

Vulnerable Configurations

Part	Description	Count
Application	Socket Socket Socket.Io Parser 4.0.4 Socket Socket.Io Parser 4.0.5 Socket Socket.Io Parser 4.1.0 Socket Socket.Io Parser 4.1.1 Socket Socket.Io Parser 4.1.2 Socket Socket.Io Parser 4.2.0 Socket Socket.Io Parser 4.2.1 Socket Socket.Io Parser 4.2.2 Socket Socket.Io Parser 3.4.0 Socket Socket.Io Parser 3.4.1 Socket Socket.Io Parser 3.4.2	11

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References