CVE-2015-2927

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service (bandwidth consumption).

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2015/04/06/3Mailing List, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777013Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1209781Issue Tracking, Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K64462543?utm_source=f5support&amp%3Butm_medium=RSS
http://www.openwall.com/lists/oss-security/2015/04/06/3Mailing List, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777013Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1209781Issue Tracking, Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K64462543?utm_source=f5support&amp%3Butm_medium=RSS

Timeline

Published: Sep 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-29287.5The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote atta CVE-2015-29297.5The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote serv CVE-2015-29314.3Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24 CVE-2015-29324.3Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inje CVE-2015-29334.3Cross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows CVE-2015-29344.3MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xml_parse function CVE-2015-29355.0MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain sensit CVE-2015-29367.1MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumptio CVE-2015-29377.1MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a deni CVE-2015-29384.3Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers t CVE-2015-29394.3Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or CVE-2015-29406.8Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authenticatio