PT-2026-80279

We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these it's easy for the remote peer to have us buffer data forever and so ultimately OOM...

Cowboy 安全漏洞

Cowboy is a lightweight and high-performance HTTP server based on Erlang/OTP, developed by Nine Nines. Versions of Cowboy from 2.0.0 to 2.15.0 contained security vulnerabilities. These vulnerabilities stemmed from unlimited buffer accumulation during multipart header parsing. This could allow...

dovecot: very large headers can cause resource exhaustion when parsing message

A security issue was found in Dovecot. Very large headers can lead to resource exhaustion when parsing messages. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to the message-header-parser, it starts building up a "fullvalue" buffer out of th...