CVE Database
/

CVE-2020-27813

Back to search

CVE-2020-27813

Published: Dec 2, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

VendorProductVersions

n/a

golang-github-gorilla-websocket

affected
github.com/gorilla/websocket v1.4.1

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now