{"id":"CVE-2026-103472","published":"2026-09-30T18:18:17.330","lastModified":"2026-10-01T19:17:18.083","description":"restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to exhaust server memory, causing denial of service through process crash.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-770"],"vendors":[],"products":[],"references":[{"url":"https://github.com/Corvusoft/restbed","tags":[]},{"url":"https://github.com/Corvusoft/restbed/blob/e1227a297ce6d4e9f78222456507b29bb8ab77e9/src/corvusoft/restbed/detail/web_socket_impl.cpp#L117","tags":[]},{"url":"https://github.com/Corvusoft/restbed/issues/558","tags":[]},{"url":"https://www.vulncheck.com/advisories/restbed-through-5.0.0-websocket-memory-exhaustion-via-unbounded-frame-buffering","tags":[]}],"exploitRefs":[{"url":"https://github.com/Corvusoft/restbed","tags":[]},{"url":"https://github.com/Corvusoft/restbed/blob/e1227a297ce6d4e9f78222456507b29bb8ab77e9/src/corvusoft/restbed/detail/web_socket_impl.cpp#L117","tags":[]},{"url":"https://github.com/Corvusoft/restbed/issues/558","tags":[]}],"hasPoc":true,"ai":{"summary":"The restbed framework is vulnerable to a memory exhaustion attack through WebSocket frames with extremely large payload lengths, allowing unauthenticated remote attackers to cause denial of service by consuming all available server memory.","exploitability":"Exploitation is straightforward for unauthenticated attackers who can establish WebSocket connections, requiring only the ability to send specially crafted frames with large declared payload sizes.","blast_radius":"The impact could affect any server running restbed 5.0.0 or earlier with WebSocket endpoints, potentially causing widespread service disruption across applications using this framework.","remediation":"Upgrade to restbed version 5.0.1 or later to address the unbounded stream buffer vulnerability.","detection":"Monitor for excessive memory consumption patterns in processes running restbed, particularly when WebSocket connections are active, and watch for sudden increases in memory usage that correlate with incoming WebSocket traffic.","tags":["websocket","dos","memory-exhaustion","remote"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:08:49.921Z"}}