Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21438
HistorySep 06, 2019 - 5:22 a.m.

Denial Of Service (DoS)

2019-09-0605:22:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.004 Low

EPSS

Percentile

75.1%

github.com/gorilla/websocket is vulnerable to denial of service (DoS). An integer overflow in conn.go when parsing WebSocket frames allows a remote attacker to cause the server to consume excessive amount of memory, resulting in an application crash when the server runs out of memory.