CVE-2018-1000518 - CVE House
Back to Database
Status published High CVE-2018-1000518

aaugustin websockets version 4 contains a CWE-409: Improper Handling of...

Vulnerability Description

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000518

Credits & Attribution

No credits recorded in the NVD database.

References

More from websockets project

View All →
CVE-2021-33880
The aaugustin websockets library before 9.1 for Python has an...
Medium 5.9

Affected Vendor

websockets project

View all reports →

Affected Software

websockets
Vulnerable Versions:
4.0

Timeline

Official Publish: June 26th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.