CVE-2026-115864
2026-11-09
22h18 +00:00
22h18 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Monoceros versions before 0.30 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.
The request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.
A remote attacker can force a worker restart with each request of a few bytes.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Memory Allocation with Excessive Size Value The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. |
