PT-2016-7970 · Francis Cianfrocca · Eventmachine

Publicado 2016-08-06 · Atualizado 2016-08-06

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions EventMachine (affected versions not specified)

Description The issue concerns a potential crash of EventMachine when opening a high number of parallel connections, specifically 1024 or more, to a server using the EventMachine engine. This crash occurs due to file descriptors overwriting the stack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2016-0276

Produtos afetados

Eventmachine

Referências · 6

• https://osv.dev/vulnerability/MGASA-2016-0276 · Aviso do Fabricante
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696015 · Nota
• http://lwn.net/Alerts/694766 · Nota
• https://advisories.mageia.org/MGASA-2016-0276.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=18988 · Nota
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678512 · Nota