Описание
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.
Ссылки
- Patch
- Issue TrackingPatchVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.6.0 (включая) до 1.1.5 (исключая)
cpe:2.3:a:eclipse:milo:*:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00413
Низкий
7.5 High
CVSS3
Дефекты
CWE-401
Связанные уязвимости
CVSS3: 7.5
github
7 дней назад
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.
EPSS
Процентиль: 34%
0.00413
Низкий
7.5 High
CVSS3
Дефекты
CWE-401