Lucene search
+L

1 matches found

RustSec
RustSec
added 2025/02/16 12:0 p.m.8 views

Denial of Service via malicious Web Push endpoint

Prior to version 0.10.3, the built-in clients of the web-push crate eagerly allocated memory based on the Content-Length header returned by the Web Push endpoint. Malicious Web Push endpoints could return a large Content-Length without ever having to send as much data, leading to denial of servic...

4CVSS7AI score0.00331EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder