PT-2023-20530 · Asyncua · Asyncua
Tran Van Arthur
·
Publicado
2023-10-02
·
Atualizado
2023-10-04
·
CVE-2023-26151
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
asyncua versions prior to 0.9.96
Description
The issue allows an attacker to send a malformed packet, causing the server to enter an infinite loop and consume excessive memory, resulting in a Denial of Service (DoS).
Recommendations
For versions prior to 0.9.96, update to version 0.9.96 or later to resolve the issue. As a temporary workaround, consider implementing packet validation to prevent malformed packets from being processed by the server. Restrict access to the server to minimize the risk of exploitation until the update is applied.
Exploit
Correção
Infinite Loop
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Asyncua