CVE-2023-40711

n/a / n/a PUBLISHED

Description (CNA)

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md

ADP enrichment

CVE

No English description supplied.

https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md

CISA-ADP

No English description supplied.

No references supplied.