Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/11 1:28 p.m.16 views

python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Impact AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query in self.deferredaddr and armed a per-addr timer in self.timersaddr that flushed the reassembled query within 500 ms RFC 6762 §18.5. Neither the per-addr list nor the number of distinct addr keys was capped, and...

6.5CVSS5.7AI score0.0023EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder