Textream Vulnerable to Uncontrolled Resource Consumption (Denial of Service)
概要
Textream Vulnerable to Uncontrolled Resource Consumption (Denial of Service)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Textream is a free macOS teleprompter app. Prior to version 1.5.1, the DirectorServer WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com