Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service (crash) via a long line.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.02233·Published 2019-12-09·Fixed in 0.9.8CWE-193
server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large number of characters that are escaped when Monopd produces XML output.