VYPR
← All advisories
Moderate severityNVD Advisory· Published Oct 10, 2018· Updated Aug 5, 2024

CVE-2018-12541

CVE-2018-12541

Description

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
io.vertx:vertx-coreMaven
>= 3.0.0, < 3.5.43.5.4

Affected products

2

Patches

Vulnerability mechanics

References

32

News mentions

0

No linked articles in our index yet.