Approved changes feed: RSS · Atom
cpe:2.3:a:uws_project:uws:*:*:*:*:*:node.js:*:*part: a version: * update: *
| Vendor | Uws Project (e300ca92-5863-51c5-b924-ec69c92bbffd) |
|---|---|
| Product | Uws (b9e93066-b805-5bfb-9677-3a823f2b3dea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-10544 |
vulnerable | 2026-06-08 05:07:25.293597 |
Details available
uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload which passes the length check of 16mb payload. This data will then inflate up to 256mb and crash the node process by exceeding V8's maximum string size. This affects uws >=0.10.0 <=0.10.8.
Published: 2018-05-31T20:00:00.000Z
Updated: 2024-09-17T02:56:54.139Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.