Lucene search
+L

Unbounded memory allocation based on untrusted length

🗓️ 01 Aug 2022 12:00:00Reported by rustsecType 
rustsec
 rustsec
🔗 rustsec.org👁 75 Views

Unbounded memory allocation from untrusted WebSocket connections leads to OOM process aborts in affected applications. Fixed in version 0.26.5 by imposing default size limits, with additional API for customization

Related
Detection
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2022-35922
2 Aug 202202:17
–circl
cnnvd
CNNVD
Rust-WebSocket 资源管理错误漏洞
1 Aug 202200:00
–cnnvd
cve
CVE
CVE-2022-35922
1 Aug 202221:35
–cve
cvelist
Cvelist
CVE-2022-35922 Memory allocation based on untrusted length in rust-websocket
1 Aug 202221:35
–cvelist
euvd
EUVD
EUVD-2022-6611
3 Oct 202520:07
–euvd
fedora
Fedora
[SECURITY] Fedora 36 Update: rust-ffsend-0.2.76-2.fc36
15 Aug 202201:11
–fedora
fedora
Fedora
[SECURITY] Fedora 35 Update: rust-ffsend-0.2.71-3.fc35
15 Aug 202201:25
–fedora
github
Github Security Blog
Rust-WebSocket memory allocation based on untrusted length
6 Aug 202205:20
–github
mend
Mend
CVE-2022-35922
1 Aug 202221:35
–mend
nvd
NVD
CVE-2022-35922
1 Aug 202222:15
–nvd
Rows per page
Vulners
Node
websockets-rswebsocketRange0.0.0–0.26.5rust

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation