Non évaluée
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause...
CVE-2023-40711
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.
Références
- advisory github.com
- advisory nvd.nist.gov
- web gitlab.com