4 matches found
CVE-2023-40711
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...
CVE-2023-40711
creationtimestamp| type| source ---|---|--- 2023-08-20 07:39:42+00:00| exploited| https://t.me/cibsecurity/68861 2026-06-19 12:46:50+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbdf7ccb-e2eb-445b-a91e-271de9d286df 2026-06-23 14:04:04+00:00| exploited|...
CVE-2023-40711
Veilid versions prior to 0.1.9 are vulnerable to a denial of service (DoS) flaw due to a lack of size checking for uncompressed data during decompression upon receiving an envelope. A remote attacker can exploit this by providing crafted packet data to trigger an out-of-memory abort . This vulner...
CVE-2023-40711
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...