CVE-2026-68911
2026-09-29
15h17 +00:00
15h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version 3.3.11.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Handling of Highly Compressed Data (Data Amplification) The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output. |
