Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3fm3-m23v-5r46

Опубликовано: 28 дек. 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Tendermint Client package vulnerable to Uncontrolled Resource Consumption

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

Пакеты

Наименование

github.com/tendermint/tendermint

go
Затронутые версииВерсия исправления

< 0.31.1

0.31.1

EPSS

Процентиль: 50%
0.00271
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

CVSS3: 7.5
nvd
около 3 лет назад

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

CVSS3: 7.5
debian
около 3 лет назад

Due to support of Gzip compression in request bodies, as well as a lac ...

EPSS

Процентиль: 50%
0.00271
Низкий

7.5 High

CVSS3

Дефекты

CWE-400