https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 01:53:26 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-115865 <p>Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.</p> <p>The request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.</p> <p>A remote attacker can force a worker restart with each request of a few bytes.</p> <p>Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.</p> <p>The request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.</p> <p>A remote attacker can force a worker restart with each request of a few bytes.</p> https://db.gcve.eu/vuln/fkie_cve-2026-115865 https://db.gcve.eu/vuln/ghsa-xfc8-r6h3-qmmm <p>Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.</p> <p>The request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.</p> <p>A remote attacker can force a worker restart with each request of a few bytes.</p> <p>Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.</p> <p>The request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.</p> <p>A remote attacker can force a worker restart with each request of a few bytes.</p> https://db.gcve.eu/vuln/ghsa-xfc8-r6h3-qmmm