Summary
Raffaele Bova discovered that Libwebsockets incorrectly handled memory
when the upgrade header is not valid in the WebSocket server. An
attacker could possibly use this issue to cause a denial of service.
(CVE-2025-11677)
Raffaele Bova discovered that Libwebsockets did not properly check the
size of the destination buffer in the async-dns component. An attacker
could possibly use this issue to cause applications to crash, leading to a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-11678)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libwebsockets | 4.0.20-2ubuntu1.1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libwebsockets | 3.2.1-3ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | libwebsockets | 4.3.3-1.1ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 7.5
Stack-based Buffer Overflow in libwebsockets DNS response parsing
Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response…
-
Medium 6.3
Use After Free in libwebsockets WebSocket server
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial …