Lucene search
K

19 matches found

Circl
Circl
added 2026/04/07 3:2 p.m.3 views

CVE-2020-7663

creationtimestamp| type| source ---|---|--- 2026-04-07 15:02:10+00:00| seen| https://t.me/codebysec/9952...

7.5CVSS7.6AI score0.02622EPSS
Exploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/18 12:0 a.m.3 views

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media (moderate)

ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media Announcement ID: openSUSE-SU-2026:10368-1 Rating: moderate Cross-References: CVE-2020-7663 CVSS scores: CVE-2020-7663 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves on...

4.3CVSS7.1AI score0.02622EPSS
Exploits1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.19 views

openSUSE: Security Advisory for rubygem (SUSE-SU-2023:0127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02622EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.2 views

SUSE CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

4.3CVSS6.9AI score0.02622EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2023/01/25 12:0 a.m.36 views

SUSE SLES15 / openSUSE 15 Security Update : rubygem-websocket-extensions (SUSE-SU-2023:0127-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0127-1 advisory. - websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser ma...

7.5CVSS7.6AI score0.02622EPSS
Exploits1References4
OSV
OSV
added 2023/01/24 12:23 p.m.5 views

SUSE-SU-2023:0127-1 Security update for rubygem-websocket-extensions

This update for rubygem-websocket-extensions fixes the following issues: - CVE-2020-7663: Fixed an excessive resource consumption when parsing crafted message headers sent by an attacker bsc1172445...

7.5CVSS7.6AI score0.02622EPSS
Exploits1References3
OSV
OSV
added 2022/11/11 11:4 a.m.2 views

OESA-2022-2093 rubygem-websocket-extensions security update

Generic extension manager for WebSocket connections. Security Fixes: websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content ...

7.5CVSS6.9AI score0.02622EPSS
Exploits1References2
OSV
OSV
added 2022/03/07 11:3 a.m.2 views

OESA-2022-1553 rubygem-websocket-extensions security update

Generic extension manager for WebSocket connections. Security Fixes: websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content ...

7.5CVSS6.9AI score0.02622EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/09/17 12:0 a.m.27 views

Ubuntu: Security Advisory (USN-4502-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02622EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/09/17 12:0 a.m.29 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : websocket-extensions vulnerability (USN-4502-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4502-1 advisory. It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex...

7.5CVSS7.4AI score0.02622EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2020/09/16 1:7 p.m.82 views

USN-4502-1: websocket-extensions vulnerability

It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in a denial of service. CVE-2020-7663...

7.5CVSS7.4AI score0.02622EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2020/06/16 12:0 a.m.2 views

Websocket Extensions Denial of Service (CVE-2020-7662; CVE-2020-7663)

A denial-of-service vulnerability exists in Websocket Extensions. Successful exploitation of this vulnerability could cause a denial-of-service condition...

5CVSS3.6AI score0.02622EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2020/06/04 12:0 a.m.37 views

FreeBSD : websocket-extensions -- ReDoS vulnerability (ca8327f7-a5a5-11ea-a860-08002728f74c)

Changelog : Remove a ReDoS vulnerability in the header parser CVE-2020-7663 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in sourc...

7.5CVSS7.7AI score0.02622EPSS
Exploits1References4
NVD
NVD
added 2020/06/02 7:15 p.m.16 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.5CVSS7.3AI score0.02622EPSS
Exploits1References6
OSV
OSV
added 2020/06/02 7:15 p.m.5 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.5CVSS7.4AI score
Exploits0References6
UbuntuCve
UbuntuCve
added 2020/06/02 7:15 p.m.23 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.5CVSS7.1AI score0.02622EPSS
Exploits1References6
Cvelist
Cvelist
added 2020/06/02 6:25 p.m.24 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.3AI score0.02622EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2020/06/02 6:25 p.m.24 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.5CVSS7.5AI score0.02622EPSS
Exploits1
CVE
CVE
added 2020/06/02 6:25 p.m.177 views

CVE-2020-7663

The CVE-2020-7663 issue affects the ruby-websocket-extensions library (prior to 0.1.5). The parser can take quadratic time when processing a Sec-WebSocket-Extensions header containing an unclosed string parameter value with a repeating two‑byte sequence (backslash and a character), enabling Regex...

7.5CVSS7.2AI score0.02622EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder