Threats tagged 'ghsa-662x-8wvj-2276'

The pageant crate's PageantStream component improperly handles a 4-byte length prefix from its input stream without validating the claimed frame size. This allows a malicious peer to claim an oversized frame (up to ~4 GiB) and cause unbounded memory buffering, leading to a remote memory-exhaustion denial-of-service (DoS) on the client process. The vulnerability affects versions from 0.2.0 up to but not including 0.2.5. A fix is available in version 0.2.5 that rejects frames exceeding the transport's maximum size before buffering.