qs could be made to crash if it received specially crafted network
traffic.
Software Description:
- node-qs: A querystring parsing and stringifying library
Details:
Nathanael Braun and Johan Brissaud discovered that qs was vulnerable
to prototype pollution. A remote attacker could possibly use this issue
to cause a denial of service.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
node-qs 6.9.1+ds-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-7693-1
CVE-2022-24999
Get the latest Linux and open source security news straight to your inbox.