Lucene search
+L

10 matches found

OSV
OSV
added 2026/07/13 3:46 p.m.11 views

PYSEC-2026-3435 python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Impact AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query in self.deferredaddr and armed a per-addr timer in self.timersaddr that flushed the reassembled query within 500 ms RFC 6762 §18.5. Neither the per-addr list nor the number of distinct addr keys was capped, and...

6.5CVSS6.1AI score0.0023EPSS
SaveExploits0References7
Rows per page
Query Builder