Unrated
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause...
CVE-2023-40711
First seen on SecPulse
Original description The description as published by the source.
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.
References
- advisory github.com
- advisory nvd.nist.gov
- web gitlab.com