Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2024/07/02 3:41 p.m.8 views

libuv: Improper Domain Lookup that potentially leads to SSRF attacks

A server-side request forgery SSRF flaw was found in the libuv package due to how the hostnameascii variable is handled in uvgetaddrinfo and uvidnatoascii. When the hostname exceeds 256 characters, it gets truncated without a terminating null byte. As a result, attackers may be able to access...

7.3CVSS7.2AI score0.02003EPSS
SaveExploits1References6
Rows per page
Query Builder