The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Node.js | Nodejs | * | 0.10.18 (including) |
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | nodejs010-node-gyp-0:3.2.0-3.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS | RedHat | nodejs010-node-gyp-0:3.2.0-3.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | RedHat | nodejs010-node-gyp-0:3.2.0-3.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el6 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | nodejs010-node-gyp-0:3.2.0-3.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS | RedHat | nodejs010-node-gyp-0:3.2.0-3.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUS | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUS | RedHat | nodejs010-node-gyp-0:3.2.0-3.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUS | RedHat | nodejs010-nodejs-qs-0:0.6.5-5.el7 | * |
| Node-qs | Ubuntu | artful | * |
| Node-qs | Ubuntu | trusty | * |
| Node-qs | Ubuntu | trusty/esm | * |
| Node-qs | Ubuntu | upstream | * |
| Node-qs | Ubuntu | utopic | * |
| Node-qs | Ubuntu | vivid | * |
| Node-qs | Ubuntu | wily | * |
| Node-qs | Ubuntu | yakkety | * |
| Node-qs | Ubuntu | zesty | * |