Lucene search

K
osvGoogleOSV:GO-2020-0037
HistoryApr 14, 2021 - 8:04 p.m.

Uncontrolled resource consumption in github.com/tendermint/tendermint

2021-04-1420:04:52
Google
osv.dev
14
uncontrolled resource consumption
gzip compression
denial of service

EPSS

0.001

Percentile

47.1%

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

EPSS

0.001

Percentile

47.1%