Количество 7
Количество 7
BDU:2026-08698
Уязвимость компонента WebSocket библиотеки libcurl программного средства для взаимодействия с серверами cURL, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-11586
By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.
CVE-2026-11586
By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.
CVE-2026-11586
By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.
CVE-2026-11586
WS Auto-PONG memory exhaustion
CVE-2026-11586
By default, curl automatically responds to WebSocket PING frames. Beca ...
GHSA-c68q-h477-5646
By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2026-08698 Уязвимость компонента WebSocket библиотеки libcurl программного средства для взаимодействия с серверами cURL, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 3.1 | 1% Низкий | 4 месяца назад | |
CVE-2026-11586 By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-11586 By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-11586 By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-11586 WS Auto-PONG memory exhaustion | 1% Низкий | около 1 месяца назад | ||
CVE-2026-11586 By default, curl automatically responds to WebSocket PING frames. Beca ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
GHSA-c68q-h477-5646 By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу