Описание
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.3.5-3 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | released | 3.2.1-3ubuntu0.1~esm1 |
| esm-apps/jammy | released | 4.0.20-2ubuntu1.1 |
| esm-apps/noble | released | 4.3.3-1.1ubuntu0.1~esm1 |
| esm-apps/resolute | not-affected | 4.3.5-3 |
| esm-apps/xenial | not-affected | code not present |
| jammy | released | 4.0.20-2ubuntu1.1 |
| noble | needed |
Показывать по
EPSS
Связанные уязвимости
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.
Use After Free in WebSocket server implementation in lws_handshake_ser ...
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.
EPSS