CyberRota Analysis
AI-GeneratedThe websocket-driver library, prior to version 0.8.1, is vulnerable to a denial-of-service attack where a malicious peer can send an HTTP request or response with an infinite list of headers, causing the server to consume excessive memory. This can result in the application running out of memory and becoming unresponsive. Developers and organizations utilizing websocket-driver for WebSocket server implementations should prioritize upgrading to version 0.8.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server() or to complement a WebSocket client, a peer can make a single connection consume an unbounded amount of memory by sending an HTTP request or response with a never-ending list of headers. This can lead to the receiving process running out of memory. This issue is fixed in version 0.8.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)