Skip to content
OpenAdvisories

Package · Ubuntu

its

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.2

    Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cow…

  • High 8.2

    Wss4jSecurityInterceptor disables WS-I BSP validation by default

    Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate…