Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Temotopublished

#39415of 53,624
6.9Total CVSS
Vulnerabilities · 1
PT-2021-3910
6.9
2021-05-07
Eventlet · Eventlet · CVE-2021-21419
**Name of the Vulnerable Software and Affected Versions** Eventlet versions prior to 0.31.0 **Description** The issue is related to the handling of large websocket frames in the Eventlet library, which can lead to memory exhaustion. A malicious peer can exploit this by sending highly compressed data frames, potentially causing a denial of service. The estimated number of potentially affected devices is not provided. **Recommendations** For versions prior to 0.31.0, update to version 0.31.0 to restrict websocket frames to reasonable limits. As a temporary workaround, consider restricting memory usage via OS limits to help against overall machine exhaustion, although this will not protect the Eventlet process itself.