Candid library causes DoS by incorrect parsing of 'empty' data type in specially crafted payload, leading to infinite decoding loop and performance degradation
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
Vulnrichment | CVE-2023-6245 Infinite decoding loop through specially crafted payload | 8 Dec 202314:26 | – | vulnrichment |
UbuntuCve | CVE-2023-6245 | 8 Dec 202300:00 | – | ubuntucve |
Github Security Blog | Candid infinite decoding loop through specially crafted payload | 8 Dec 202315:23 | – | github |
OSV | Candid infinite decoding loop through specially crafted payload | 8 Dec 202315:23 | – | osv |
OSV | Infinite decoding loop through specially crafted payload | 8 Dec 202312:00 | – | osv |
Cvelist | CVE-2023-6245 Infinite decoding loop through specially crafted payload | 8 Dec 202314:26 | – | cvelist |
Prion | Design/Logic Flaw | 8 Dec 202315:15 | – | prion |
CVE | CVE-2023-6245 | 8 Dec 202315:15 | – | cve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo