Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11677

Опубликовано: 20 окт. 2025
Источник: nvd
EPSS Низкий

Описание

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

EPSS

Процентиль: 23%
0.00078
Низкий

Дефекты

CWE-416

Связанные уязвимости

ubuntu
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

debian
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_ser ...

github
4 месяца назад

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

EPSS

Процентиль: 23%
0.00078
Низкий

Дефекты

CWE-416