Bug 2501934 (CVE-2026-54463) - CVE-2026-54463 websocket-driver: websocket-driver: Denial of Service via unbounded memory consumption in WebSocket length header
Summary: CVE-2026-54463 websocket-driver: websocket-driver: Denial of Service via unbo...
Keywords:
Status: NEW
Alias: CVE-2026-54463
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-17 21:02 UTC by OSIDB Bzimport
Modified: 2026-08-20 20:52 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-17 21:02:13 UTC
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allows an arbitrarily large integer to be encoded as bytes with the high bit set, and a server or client can send an indefinite sequence of 0x80 or higher bytes that the peer parses into an ever-growing Ruby integer. This can make a WebSocket connection consume an unbounded amount of memory and lead to the host process running out of memory. This issue is fixed in version 0.8.1.


Note You need to log in before you can comment on or make changes to this bug.