Skip to content
OpenAdvisories

Package · Ubuntu

erlang-cowboy

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy_http enforces the max_headers limit by counting…