Lucene search
GoogleOSV:GHSA-6G87-FF9Q-V847HistorySep 17, 2018 - 8:46 p.m.
websockets is vulnerable to denial of service by memory exhaustion
2018-09-1720:46:52
Google
osv.dev
12
0.001 Low
EPSS
Percentile
45.6%
The Python websockets library version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appears to be exploitable via sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in version 5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| websockets | eq | 4.0.1 | |
| websockets | eq | 4.0 |
Related
prion
prion
Design/Logic Flaw
2018-06-26 16:29:00
fedora
fedora
[SECURITY] Fedora 28 Update: python-websockets-5.0.1-1.fc28
2018-07-11 20:23:06
github
github
websockets is vulnerable to denial of service by memory exhaustion
2018-09-17 20:46:52
openvas
openvas
Fedora Update for python-websockets FEDORA-2018-4dd851152c
2018-07-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2783-1)
2023-07-06 00:00:00
osv
osv
CVE-2018-1000518
2018-06-26 16:29:01
PYSEC-2018-79
2018-06-26 16:29:00
cvelist
cvelist
CVE-2018-1000518
2018-06-26 16:00:00
nvd
nvd
CVE-2018-1000518
2018-06-26 16:29:01
cve
cve
CVE-2018-1000518
2018-06-26 16:29:01
veracode
veracode
Denial Of Service (DoS)
2018-06-27 05:01:02
nessus
nessus