CVE-2015-8315

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/112567
• https://www.ibm.com/support/pages/node/6214472 (Advisory)
• http://www.openwall.com/lists/oss-security/2016/04/20/11
• http://www.securityfocus.com/bid/96389
• https://nodesecurity.io/advisories/46
• https://support.f5.com/csp/article/K46337613?utm_source=f5support&utm_medium=RSS
• https://nvd.nist.gov/vuln/detail/CVE-2015-8315
• https://web.archive.org/web/20200227190911/http://www.securityfocus.com/bid/96389
• https://github.com/advisories/GHSA-3fx5-fwvr-xrjg (Advisory)
• https://support.f5.com/csp/article/K46337613?utm_source=f5support&amp%3Butm_medium=RSS

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6214472

Frequently Asked Questions

• What is CVE-2015-8315?

  CVE-2015-8315 is a vulnerability in the Node.js ms package which allows attackers to cause a denial of service by exploiting a regular expression implementation error.

• What is the severity of CVE-2015-8315?

  CVE-2015-8315 has a severity rating of 7.5 (high).

• Which software version is affected by CVE-2015-8315?

  The ms package before version 0.7.1 for Node.js is affected by CVE-2015-8315.

• How can an attacker exploit CVE-2015-8315?

  An attacker can exploit CVE-2015-8315 by using a regular expression to cause the application to hang.

• Are there any references for CVE-2015-8315?

  Yes, you can find references for CVE-2015-8315 at the following URLs: [https://exchange.xforce.ibmcloud.com/vulnerabilities/112567](https://exchange.xforce.ibmcloud.com/vulnerabilities/112567), [https://www.ibm.com/support/pages/node/6214472](https://www.ibm.com/support/pages/node/6214472), [http://www.openwall.com/lists/oss-security/2016/04/20/11](http://www.openwall.com/lists/oss-security/2016/04/20/11).