GMS-2019-61: Memory Exposure in tunnel-agent

(updated )

Versions of tunnel-agent are vulnerable to memory exposure.

This is exploitable if user supplied input is provided to the auth value and is a number.

Proof-of-concept:

require('request')({
 method: 'GET',
 uri: 'http://www.example.com',
 tunnel: true,
 proxy:{
 protocol: 'http:',
 host:'127.0.0.1',
 port:8080,
 auth:USERSUPPLIEDINPUT // number
 }
});
``` Update to or later.

References

Code Behaviors & Features

Detect and mitigate GMS-2019-61 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →