Description
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially terminating the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eclipse Foundation | Eclipse Milo | 0.6.0 – ≤ 1.1.4 | — |
Advisories 1
- ICSA-26-288-01 Eclipse Foundation Eclipse Milo CISA ICS & IT advisories · Oct 15, 2026