CVE-2018-3739

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON).

Metrics

CVSS 3.0 9.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-400 CWE-125

Affected software

Vendor	Product	Versions
HackerOne	https-proxy-agent node module	Versions before 2.1.1

References

https://hackerone.com/reports/319532Exploit, Third Party Advisory
https://hackerone.com/reports/319532Exploit, Third Party Advisory

Timeline

Published: Jun 7, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-37407.5A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML eleme CVE-2018-37416.1There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attribut CVE-2018-37436.1Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.CVE-2018-37449.8The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.CVE-2018-37459.1atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.CVE-2018-37469.8The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on th CVE-2018-37476.1The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious J CVE-2018-37486.1There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5. File name, which contains malicious HTML (eg. embedded ifra CVE-2018-37499.8The utilities function in all versions < 1.0.1 of the deap node module can be tricked into modifying the prototype of Object when the attack CVE-2018-37509.8The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when th CVE-2018-37519.8The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object whe CVE-2018-37529.8The utilities function in all versions <= 1.0.0 of the merge-options node module can be tricked into modifying the prototype of Object when