Lucene search
K

6 matches found

OSV
OSV
added 2 days ago3 views

GHSA-96HV-2XVQ-FX4P ws: Memory exhaustion DoS from tiny fragments and data chunks

Impact A high volume of exceptionally small fragments and data chunks can be sent by a peer, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process...

7.5CVSS5.3AI score0.00052EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2 days ago9 views

ws: Memory exhaustion DoS from tiny fragments and data chunks

Impact A high volume of exceptionally small fragments and data chunks can be sent by a peer, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process...

7.5CVSS5.3AI score0.00052EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.4 views

PT-2026-22039

Name of the Vulnerable Software and Affected Versions TinyWeb versions prior to 2.02 Description TinyWeb is a web server written in Delphi for Win32. Versions prior to 2.02 are susceptible to a Denial of Service DoS condition caused by memory exhaustion. An unauthenticated remote attacker can sen...

8.7CVSS6AI score0.00436EPSS
Exploits0References11
OSV
OSV
added 2024/10/09 2:13 p.m.13 views

CVE-2024-47667 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 SPRZ452DJuly 2018Revised December 2019 1 mentions when an inbound PCIe TLP spans more than two internal AXI...

5.5CVSS6.2AI score0.00207EPSS
Exploits0References11
OSV
OSV
added 2019/02/18 11:58 p.m.4 views

GHSA-6663-C963-2GQG DoS due to excessively large websocket message in ws

Affected versions of ws do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload. Recommendation Update to version 1.1.1 or later. Alternatively, set the maxpayload option fo...

7.5CVSS7.1AI score0.07539EPSS
Exploits0References4
Oracle linux
Oracle linux
added 2018/04/26 12:0 a.m.52 views

Unbreakable Enterprise kernel security update

4.1.12-124.14.2 - scsi: iscsitcp: set BDICAPSTABLEWRITES when data digest enabled Jianchao Wang Orabug: 27726302 - block: fix biowillgap for first bvec with offset Ming Lei Orabug: 27775588 - block: relax check on sg gap Ming Lei Orabug: 27775588 - block: don't optimize for non-cloned bio in...

7.2CVSS1.1AI score0.01999EPSS
Exploits0
Rows per page
Query Builder