https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:41:42 +0000 https://cve.radiocsirt.org/vuln/cve-2020-35896 <p>An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.</p> <p>An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.</p> https://cve.radiocsirt.org/vuln/cve-2020-35896 https://cve.radiocsirt.org/vuln/rustsec-2020-0043 <p><strong>Affected:</strong> crates.io: ws</p> <p>Affected versions of this crate did not properly check and cap the growth of the outgoing buffer.</p> <p>This allows a remote attacker to take down the process by growing the buffer of their (single) connection until the process runs out of memory it can allocate and is killed.</p> <p>The flaw was corrected in the [`parity-ws` fork](https://crates.io/crates/parity-ws) (&gt;=0.10.0) by [disconnecting a client when the buffer runs full](https://github.com/housleyjk/ws-rs/pull/328).</p> <p><strong>Affected:</strong> crates.io: ws</p> <p>Affected versions of this crate did not properly check and cap the growth of the outgoing buffer.</p> <p>This allows a remote attacker to take down the process by growing the buffer of their (single) connection until the process runs out of memory it can allocate and is killed.</p> <p>The flaw was corrected in the [`parity-ws` fork](https://crates.io/crates/parity-ws) (&gt;=0.10.0) by [disconnecting a client when the buffer runs full](https://github.com/housleyjk/ws-rs/pull/328).</p> https://cve.radiocsirt.org/vuln/rustsec-2020-0043