Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/19 11:56 a.m.10 views

PYSEC-2026-3681 libp2p: yamux connection DoS via oversized data frame

Summary The yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive window before reading the frame body. Any peer that completes a standard libp2p handshake can send a single 12-byte frame claiming a 4 GB body, causing the victim's yamux read loop ...

7.5CVSS5.5AI score0.00415EPSS
SaveExploits0References6
Rows per page
Query Builder