Uncontrolled Recursion Affecting ublock-origin package, versions <1.37.0+dfsg-1
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN12-UBLOCKORIGIN-1562042
- published 23 Jul 2021
- disclosed 18 Jul 2021
Introduced: 18 Jul 2021
CVE-2021-36773 Open this link in a new tabHow to fix?
Upgrade Debian:12 ublock-origin to version 1.37.0+dfsg-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream ublock-origin package and not the ublock-origin package as distributed by Debian.
See How to fix? for Debian:12 relevant fixed versions and status.
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).