Skip to main content

Uncontrolled Recursion in ws

Cxf3872f17-a858

  • ws
High
8.2/10

Summary

The package `ws` is vulnerable to stack overflow, due to recursive function calls in `lib/Receiver.js`. When the parser attempts to parse a buffer with a huge number of frames, it leads to stack memory consumption. This affects the availability.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-674 - Uncontrolled Recursion

The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

References

Advisory Timeline

  • Published