Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits.
Bandit.Headers.parse_integer/2 in…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory and CPU via a request body made of many 1-byte chunks.
The chunked reader in lib/bandit/http1/socket.ex keeps…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to grow per-connection memory and CPU cost without bound via a large SETTINGS_HEADER_TABLE_SIZE. Bandit resizes its HPACK encoder table to…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a small HPACK-compressed HEADERS block. The block stores one large cookie value in the HPACK dynamic…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byte…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOW_UPDATE frames. The attacker opens thousands of streams whose responses block on the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits.
Bandit.Headers.parse_integer/2 in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory and CPU via a request body made of many 1-byte chunks.
The chunked reader in lib/bandit/http1/socket.ex keeps…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to grow per-connection memory and CPU cost without bound via a large SETTINGS_HEADER_TABLE_SIZE. Bandit resizes its HPACK encoder table to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a small HPACK-compressed HEADERS block. The block stores one large cookie value in the HPACK dynamic…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byte…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOW_UPDATE frames. The attacker opens thousands of streams whose responses block on the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,6 % · rekomendacja wg zapisanej polityki