Lucene search
+L

134 matches found

RedhatCVE
RedhatCVE
•added 2025/06/09 8:15 a.m.•30 views

CVE-2025-5399

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

7.5CVSS7AI score0.01376EPSS
SaveExploits1References7
OSV
OSV
•added 2025/06/07 8:15 a.m.•9 views

ALPINE-CVE-2025-5399

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

7.5CVSS6.9AI score0.01376EPSS
SaveExploits1References1
Mend
Mend
•added 2025/06/07 7:49 a.m.•5 views

CVE-2025-5399

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

8.7CVSS0.01376EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/07 12:00 a.m.•3 views

CVE-2025-5399: Loop with Unreachable Exit Condition

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

7.5CVSS6.4AI score0.01376EPSS
SaveExploits1References1
curl security advisories
curl security advisories
•added 2025/06/04 8:00 a.m.•23 views

WebSocket endless loop

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

7.5CVSS6.9AI score0.01376EPSS
SaveExploits1References1Affected Software2
RedHat Linux
RedHat Linux
•added 2025/02/10 1:06 a.m.•23 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2025/02/10 1:06 a.m.•22 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2025/01/09 2:57 p.m.•25 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2024/12/12 2:25 a.m.•11 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2024/11/26 11:24 a.m.•19 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2024/11/20 4:28 a.m.•16 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2024/11/20 12:57 a.m.•23 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2024/11/19 8:51 a.m.•16 views

waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References8
Veracode
Veracode
•added 2024/11/11 7:29 a.m.•19 views

Denial Of Service (DoS)

Waitress is vulnerable to Denial Of Service DoS. The vulnerability is due to a race condition where, if a remote client closes the connection before Waitress calls getpeername, allows an attacker to trigger a busy-loop in the server, causing it to repeatedly attempt writing to a non-existent sock...

7.5CVSS7AI score0.01377EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2024/10/29 3:15 p.m.•17 views

AZL-51831 CVE-2024-49769 affecting package python-waitress for versions less than 3.0.1-1

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

7.5CVSS5.7AI score0.01377EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/29 3:15 p.m.•15 views

PYSEC-2024-211

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

7.5CVSS5.9AI score0.01377EPSS
SaveExploits0References5
Snyk
Snyk
•added 2024/10/29 2:33 p.m.•14 views

Missing Release of Resource after Effective Lifetime

Overview waitress is a production-quality pure-Python WSGI server with very acceptable performance. Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime due to the improper handling of socket connections when a remote client prematurely closes t...

8.7CVSS6.9AI score0.01377EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•14 views

Waitress 安全漏洞

Waitress is a production-quality, pure Python WSGI server from the Pylons project. A security vulnerability existed prior to Waitress version 3.0.1, which stemmed from the fact that if a remote client closed a connection before waitress called getpeername, waitress would fail to clean up the...

7.5CVSS7.4AI score0.01377EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•3 views

CVE-2024-49769: Missing Release of Resource after Effective Lifetime

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

7.5CVSS7.1AI score0.01377EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/01/30 1:26 p.m.•50 views

Moderate: Red Hat Security Advisory: avahi security update

An update for avahi is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

6.2CVSS6.6AI score0.00443EPSS
SaveExploits0References7
Rows per page
Query Builder