aiohttp server lacks an initial request/header timeout

Summary The keepalive timeout was not used during the initial portion of a request. Impact An attacker could keep an idle connection open indefinitely before sending any data. Workaround Use a reverse proxy as recommended for all production deployments with sensible keepalive limits...

GHSA-5WR8-GCQF-GQF3 aiohttp server lacks an initial request/header timeout

Summary The keepalive timeout was not used during the initial portion of a request. Impact An attacker could keep an idle connection open indefinitely before sending any data. Workaround Use a reverse proxy as recommended for all production deployments with sensible keepalive limits...

EUVD-2004-0295

Malware in sbrugna...

PT-2018-5778

Name of the Vulnerable Software and Affected Versions: miekg-dns versions prior to 1.0.4 Description: A denial of service flaw allows a remote attacker to block the DNS server from accepting new connections by using carefully timed TCP packets or by opening a connection and leaving it idle. This...

CVE-2004-0295: Undefined Security Weakness

TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service CPU consumption via an open idle connection...

Beck IPC@Chip TelnetD vulnerable to account lockout via idle telnet connection

Overview There is a vulnerability in the Beck IPC@CHIP that allows an attacker to create a denial-of-service condition. Description The Beck IPC@CHIP is a single chip embedded webserver. This device contains a telnet server that is configured by default to not have a login timeout. Additionally,...