24 matches found
EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client
A read-timeout flaw was found in the HTTPS NIO Connector handling of SSL handshakes. A remote, unauthenticated attacker could create a socket and cause a thread to remain occupied indefinitely so long as the socket remained open denial of service...
7.5CVSS7.1AI score0.02646EPSS
SaveExploits0References4
DEBIAN-CVE-2007-0539
The wpremotefopen function in WordPress before 2.1 allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint...
7.8CVSS6.8AI score0.03555EPSS
SaveExploits0References1
20