CWE-130 Improper Handling of Length Parameter Inconsistency

websocket-driver: Message corruption via abuse of protocol length headers

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

Django has an Improper Handling of Length Parameter Inconsistency

rdiffweb's unlimited username field length can lead to DoS

Rack has Content-Length mismatch in Rack::Files error responses

rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

rPGP Panics on Malformed Untrusted Input

Django vulnerable to denial-of-service attack

Django vulnerable to a denial-of-service attack

Django vulnerable to Denial of Service

Django vulnerable to Denial of Service

Elliptic's ECDSA missing check for whether leading bit of r and s is zero

Remotely exploitable denial of service in Rosenpass

Duplicate Advisory: Remotely exploitable denial of service in Rosenpass

Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

rdiffweb's unlimited length email field can lead to DoS

Tor path lengths too short when "full Vanguards" configured

Improper Handling of Length Parameter Inconsistency in Apache Ant

Out of memory error when submitting the dataset form with a specially-crafted field

Jetty accepts "+" prefixed value in Content-Length

swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length

Duplicate advisory: swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length

Improper handling of NTS cookie length that could crash the ntpd-rs server