Lucene search
+L

22 matches found

PyPA
PyPA
•added 2026/08/19 11:56 a.m.•21 views

libp2p: yamux connection DoS via oversized data frame

SummaryThe yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive window before reading the frame body. Any peer that completes a standard libp2p handshake can send a single 12-byte frame claiming a 4 GB body, causing the victim's yamux read loop t...

7.5CVSS6AI score0.00488EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder