High severityNVD Advisory· Published Jul 29, 2019· Updated Aug 4, 2024
CVE-2019-13126
CVE-2019-13126
Description
An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/nats-io/nats-server/v2Go | < 2.2.0 | 2.2.0 |
Affected products
6- NATS/NATS Serverdescription
- osv-coords5 versionspkg:apk/chainguard/nats-serverpkg:apk/chainguard/nats-server-compatpkg:apk/wolfi/nats-serverpkg:apk/wolfi/nats-server-compatpkg:golang/github.com/nats-io/nats-server/v2
< 0+ 4 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 2.2.0
Patches
Vulnerability mechanics
References
8- github.com/advisories/GHSA-jp4j-47f9-2vc3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-13126ghsaADVISORY
- github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891ddaghsaWEB
- github.com/nats-io/nats-server/commits/masterghsaWEB
- github.com/nats-io/nats-server/pull/1053ghsax_refsource_CONFIRMWEB
- github.com/nats-io/nats-server/pull/1441ghsaWEB
- www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126ghsaWEB
- www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.