CVE-2020-27543

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/paulvarache/restify-paginate/Product, Third Party Advisory
https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginateExploit, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20210401-0002/Third Party Advisory
https://www.npmjs.com/package/restify-paginateProduct, Third Party Advisory
https://github.com/paulvarache/restify-paginate/Product, Third Party Advisory
https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginateExploit, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20210401-0002/Third Party Advisory
https://www.npmjs.com/package/restify-paginateProduct, Third Party Advisory

Timeline

Published: Feb 25, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-275449.8An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote a CVE-2020-275456.5libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted CVE-2020-27553.7Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Ja CVE-2020-275537.5In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows CVE-2020-275547.5Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensit CVE-2020-275559.8Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrar CVE-2020-275565.3A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device.CVE-2020-275575.5Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the vi CVE-2020-275586.5Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.CVE-2020-27563.7Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected ar CVE-2020-275603.3ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.CVE-2020-275687.5Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller r