Lucene search
GoogleOSV:CVE-2018-1000518HistoryJun 26, 2018 - 4:29 p.m.
CVE-2018-1000518
2018-06-2616:29:01
Google
osv.dev
6
0.001 Low
EPSS
Percentile
45.6%
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| websockets | eq | 3.4 | |
| websockets | eq | 3.2 | |
| websockets | eq | 3.0 | |
| websockets | eq | 2.2 | |
| websockets | eq | 2.3 | |
| websockets | eq | 2.4 | |
| websockets | eq | 2.1 | |
| websockets | eq | 2.0 | |
| websockets | eq | 2.5 | |
| websockets | eq | 2.6 |
References
Related
prion
prion
Design/Logic Flaw
2018-06-26 16:29:00
fedora
fedora
[SECURITY] Fedora 28 Update: python-websockets-5.0.1-1.fc28
2018-07-11 20:23:06
github
github
websockets is vulnerable to denial of service by memory exhaustion
2018-09-17 20:46:52
openvas
openvas
Fedora Update for python-websockets FEDORA-2018-4dd851152c
2018-07-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2783-1)
2023-07-06 00:00:00
cvelist
cvelist
CVE-2018-1000518
2018-06-26 16:00:00
nvd
nvd
CVE-2018-1000518
2018-06-26 16:29:01
cve
cve
CVE-2018-1000518
2018-06-26 16:29:01
osv
osv
websockets is vulnerable to denial of service by memory exhaustion
2018-09-17 20:46:52
PYSEC-2018-79
2018-06-26 16:29:00
veracode
veracode
Denial Of Service (DoS)
2018-06-27 05:01:02
nessus
nessus