Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fpc8-25p9-jfmr

Опубликовано: 20 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.3

Описание

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

EPSS

Процентиль: 23%
0.00078
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-416

Связанные уязвимости

ubuntu
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

nvd
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

debian
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_ser ...

EPSS

Процентиль: 23%
0.00078
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-416