Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6854
HistoryJun 27, 2018 - 5:01 a.m.

Denial Of Service (DoS)

2018-06-2705:01:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

45.6%

websockets is vulnerable to denial of service attacks. The application does not properly enforce a size limit when decompressing frames, allowing a malicious user to pass a zip bomb to the application to consume memory and crash it.

CPENameOperatorVersion
websocketsle4.1
websocketsle4.1

0.001 Low

EPSS

Percentile

45.6%