cnvd - cnvd-2022-85553

cnvd-2022-85553

Vulnerability from cnvd

Title: Socketio Engine.IO拒绝服务漏洞

Description:

Engine.IO是Socket.IO基于传输的跨浏览器/跨设备双向通信层的实现。

Socketio Engine.IO 3.6.1之前的版本、4.0.0及其之后，6.2.1之前版本存在拒绝服务漏洞，该漏洞源于未对输入的错误消息做正确的处理，攻击者可利用漏洞发起拒绝服务攻击。

Severity: 高

Patch Name: Socketio Engine.IO拒绝服务漏洞的补丁

Patch Description:

Engine.IO是Socket.IO基于传输的跨浏览器/跨设备双向通信层的实现。

Socketio Engine.IO 3.6.1之前的版本、4.0.0及其之后，6.2.1之前版本存在拒绝服务漏洞，该漏洞源于未对输入的错误消息做正确的处理，攻击者可利用漏洞发起拒绝服务攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新：https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w

Reference: https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085

Impacted products

Name
['Socketio Engine.IO <3.6.1', 'Socketio Engine.IO >=4.0.0，<6.2.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-41940",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-41940"
    }
  },
  "description": "Engine.IO\u662fSocket.IO\u57fa\u4e8e\u4f20\u8f93\u7684\u8de8\u6d4f\u89c8\u5668/\u8de8\u8bbe\u5907\u53cc\u5411\u901a\u4fe1\u5c42\u7684\u5b9e\u73b0\u3002\n\nSocketio Engine.IO 3.6.1\u4e4b\u524d\u7684\u7248\u672c\u30014.0.0\u53ca\u5176\u4e4b\u540e\uff0c6.2.1\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u5bf9\u8f93\u5165\u7684\u9519\u8bef\u6d88\u606f\u505a\u6b63\u786e\u7684\u5904\u7406\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1ahttps://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-85553",
  "openTime": "2022-12-07",
  "patchDescription": "Engine.IO\u662fSocket.IO\u57fa\u4e8e\u4f20\u8f93\u7684\u8de8\u6d4f\u89c8\u5668/\u8de8\u8bbe\u5907\u53cc\u5411\u901a\u4fe1\u5c42\u7684\u5b9e\u73b0\u3002\r\n\r\nSocketio Engine.IO 3.6.1\u4e4b\u524d\u7684\u7248\u672c\u30014.0.0\u53ca\u5176\u4e4b\u540e\uff0c6.2.1\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u5bf9\u8f93\u5165\u7684\u9519\u8bef\u6d88\u606f\u505a\u6b63\u786e\u7684\u5904\u7406\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u53d1\u8d77\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Socketio Engine.IO\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Socketio Engine.IO \u003c3.6.1",
      "Socketio Engine.IO \u003e=4.0.0\uff0c\u003c6.2.1"
    ]
  },
  "referenceLink": "https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085",
  "serverity": "\u9ad8",
  "submitTime": "2022-11-24",
  "title": "Socketio Engine.IO\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2022-41940 (GCVE-0-2022-41940)

Vulnerability from cvelistv5

Published

2022-11-22 00:00

Modified

2025-04-22 16:02

Severity ?

7.1 (High) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE

CWE-248 - Uncaught Exception

Summary

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io package, including those who uses depending packages like socket.io. There is no known workaround except upgrading to a safe version. There are patches for this issue released in versions 3.6.1 and 6.2.1.

References

▼	URL	Tags
	https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w
	https://github.com/socketio/engine.io/commit/425e833ab13373edf1dd5a0706f07100db14e3c6
	https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085

Impacted products

	Vendor	Product	Version
	socketio	engine.io	Version: < 3.6.1 Version: >= 4.0.0, < 6.2.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:56:38.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/socketio/engine.io/commit/425e833ab13373edf1dd5a0706f07100db14e3c6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-41940",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T15:41:28.524567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T16:02:20.459Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "engine.io",
          "vendor": "socketio",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.6.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 6.2.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io package, including those who uses depending packages like socket.io. There is no known workaround except upgrading to a safe version. There are patches for this issue released in versions 3.6.1 and 6.2.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-22T00:00:00.000Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "url": "https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w"
        },
        {
          "url": "https://github.com/socketio/engine.io/commit/425e833ab13373edf1dd5a0706f07100db14e3c6"
        },
        {
          "url": "https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085"
        }
      ],
      "source": {
        "advisory": "GHSA-r7qp-cfhv-p84w",
        "discovery": "UNKNOWN"
      },
      "title": "Uncaught exception in engine.io "
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2022-41940",
    "datePublished": "2022-11-22T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-04-22T16:02:20.459Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted