Lucene search
K

7 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.2 views

The vulnerability of the aaugustin communication protocol’s websockets in the Python programming language arises from information leaks due to temporal discrepancies. This allows attackers to gain access to confidential data.

The vulnerability of the aaugustin communication protocol’s websockets in the Python programming language is related to an error that occurs when basic authentication using basicauthprotocolfactorycredentials=... is enabled. Exploiting this vulnerability can allow a remote attacker to gain access...

5.9CVSS6.9AI score0.02265EPSS
Exploits0References4Affected Software2
CNVD
CNVD
added 2018/06/28 12:0 a.m.3 views

aaugustin websockets denial of service vulnerability

aaugustin websockets is a library for building WebSocket servers and clients in Python. A security vulnerability exists in aaugustin websockets version 4. An attacker can exploit this vulnerability to cause a denial of service memory exhaustion...

7.5CVSS6.6AI score0.01818EPSS
Exploits1References1
NVD
NVD
added 2018/06/26 4:29 p.m.17 views

CVE-2018-1000518

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

7.5CVSS7.7AI score0.01818EPSS
Exploits1References1
Prion
Prion
added 2018/06/26 4:29 p.m.24 views

Design/Logic Flaw

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

5CVSS7.5AI score0.01818EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/06/26 4:29 p.m.24 views

PYSEC-2018-79

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

7.5CVSS4.8AI score0.01818EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/06/26 4:0 p.m.22 views

CVE-2018-1000518

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

7.6AI score0.01818EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2018/06/26 12:0 a.m.3 views

PT-2018-9415 · Aaugustin +1 · Uwebsockets +1

Name of the Vulnerable Software and Affected Versions: aaugustin websockets versions 4.0 through 4.0 Description: The issue is related to improper handling of highly compressed data, which can result in Denial of Service by memory exhaustion. This can be exploited by sending a specially crafted...

9.1CVSS6.3AI score0.06718EPSS
Exploits3References74
Rows per page
Query Builder