一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月5日

CVE-2026-85448 [HIGH] – MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities s

未分类
📑 文章目录

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.