cowlib vulnerabilities (Hex)
8 vulnerabilities.
-
cowlibHex Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion 8.7 High -
cowlibHex Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 6.3 Medium -
cowlibHex Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS 8.7 High -
cowlibHex HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 6.3 Medium -
cowlibHex Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame 8.2 High -
cowlibHex CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 6.3 Medium -
cowlibHex Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS 8.7 High -
cowlibHex Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 2.1 Low