USN-4502-1: websocket-extensions vulnerability
Published Sep 16, 2020
·Updated
It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in a denial of service. (CVE-2020-7663)
Affected Software
0 affected components
Event History
Feb 24, 2026
Advisory Published
via Ubuntu·12:35 AM
Data Sourced
via Ubuntu·12:35 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-7663.
2
What is the affected software for this vulnerability?
The affected software is ruby-websocket-extensions.
3
What is the severity of this vulnerability?
The severity of this vulnerability is not specified.
4
How can I fix the vulnerability?
To fix the vulnerability, you should update ruby-websocket-extensions to version 0.1.2-1+deb9u1build0.20.04.1 for Ubuntu 20.04, version 0.1.2-1+deb9u1build0.18.04.1 for Ubuntu 18.04, or version 0.1.2-1+deb9u1build0.16.04.1 for Ubuntu 16.04.
5
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Ubuntu Security website at https://ubuntu.com/security/CVE-2020-7663.