Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Aaugustin

#30195of 53,632
8.7Total CVSS
Vulnerabilities · 1
PT-2018-9415
8.7
2018-06-26
Aaugustin · Uwebsockets · CVE-2018-1000518
**Name of the Vulnerable Software and Affected Versions** aaugustin websockets versions 4.0 through 4.0 **Description** The issue is related to improper handling of highly compressed data, which can result in Denial of Service by memory exhaustion. This can be exploited by sending a specially crafted frame on an established connection. The vulnerability appears to have been fixed in version 5. **Recommendations** For version 4, update to version 5 to resolve the issue. As a temporary workaround, consider configuring the websockets library with compression=None to prevent exploitation.