| Package | Affected versions | Patched versions |
|---|---|---|
| toxcore | < 0.2.8 | 0.2.8 |
The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free