CVE-2020-36406

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

uwebsockets:WebSocket: Crash in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4752461728972800 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: WebSocket Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

uwebsockets:EpollEchoServerPubSub: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4778216070447104 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServerPubSub Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1...

uwebsockets:EpollEchoServer: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=6688496056664064 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1 Crash...

uwebsockets:EpollEchoServer: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5731344676683776 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1 Crash...

uwebsockets:TopicTree: Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4810206563926016 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: TopicTree Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1 Crash...

uwebsockets:TopicTree: Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5156397570981888 Project: uwebsockets Fuzzing Engine: afl Fuzz Target: TopicTree Job Type: aflasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address:...

uWebSockets buffer overflow vulnerability

uWebSockets is a highly extensible library of the lightest and most efficient WebSocket servers. It features an easy-to-use, fully asynchronous object-oriented interface and scales to millions of connections using a fraction of the memory compared to other competing products. uWebSockets versions...

CVE-2020-36406

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

CVE-2020-36406

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

Stack overflow

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

CVE-2020-36406

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

CVE-2020-36406

CVE-2020-36406 affects uWebSockets versions 18.11.0–18.12.0, with a stack-based buffer overflow in the internal function uWS::TopicTree::trimTree (called from uWS::TopicTree::unsubscribeAll). The issue is repeatedly triggered by high topic accumulation and is disputed by the vendor as minor or no...

PT-2021-12045 · Unknown · Uwebsockets

Name of the Vulnerable Software and Affected Versions: uWebSockets versions 18.11.0 through 18.12.0 Description: The issue is related to a stack-based buffer overflow in the uWS::TopicTree::trimTree function, which is called from uWS::TopicTree::unsubscribeAll. The vendor disputes the severity of...

CVE-2020-36406: Out-of-bounds Write

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

uWebSockets 缓冲区错误漏洞

uWebSockets is a highly extensible library of the lightest and most efficient WebSocket servers. It features an easy-to-use, fully asynchronous object-oriented interface and scales to millions of connections using a fraction of the memory compared to other competing products. uWebSockets versions...

uwebsockets:EpollEchoServer: Heap-use-after-free in uWS::HttpParser::consumePostPadded

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5573705863397376 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Cra...

uwebsockets:HttpWithProxy: Crash in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5160530512838656 Project: uwebsockets Fuzzing Engine: afl Fuzz Target: HttpWithProxy Job Type: aflasanuwebsockets Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fd1a01878a8...

uwebsockets:EpollEchoServer: Bad-cast to std::__shared_weak_countstd::__1::shared_ptr<bool>::~shared_ptr in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5678855417364480 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Bad-cast Crash Address:...

uwebsockets:EpollEchoServer: Heap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5528768993165312 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Cra...