Akka HTTP 10.0.x, 10.1.x Denial of Service vulnerability

Akka HTTP is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-16131

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

CVE-2018-16131

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

Design/Logic Flaw

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), ch.megard:akka-http-cors_2.12 (>=0.3.0, <=0.3.1) +284 more potentially affected by CVE-2018-16131 via com.typesafe.akka:akka-http-core_2.12 (>=10.1.0, <=10.1.3)

com.typesafe.akka:akka-http-core2.12 MAVEN version =10.1.0, =0.3.0, =0.3.0, =0.3.0-rc7, =0.3.0-rc7, =0.3.0-rc7, =0.3.0-rc7, =3.0.0, =0.4.1, =0.4.1, =0.4.1, =0.5.0, =0.4.13, =0.6, =0.6, =0.7 and more Source cves: CVE-2018-16131 Source advisory: MEND:CVE-2018-16131...

CVE-2018-16131

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

ch.megard:akka-http-cors_2.11 (>=0.3.0, <=0.3.1), com.arpnetworking.metrics:metrics-aggregator-daemon (>=1.10.0, <=1.11.1) +166 more potentially affected by CVE-2018-16131 via com.typesafe.akka:akka-http-core_2.11 (>=10.1.0, <=10.1.3)

com.typesafe.akka:akka-http-core2.11 MAVEN version =10.1.0, =0.3.0, =1.10.0, =3.0.0, =0.5.4, =0.5.4, =0.5.4, =0.4.13, =5.0.2, =5.0.2, =0.2.21, =0.2.21, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2018-16131 Source advisory: MEND:CVE-2018-16131...

CVE-2018-16131

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

CVE-2018-16131

The CVE-2018-16131 issue affects Lightbend Akka HTTP, specifically the decodeRequest and decodeRequestWith directives in Akka HTTP 10.0.x (up to 10.0.13) and 10.1.x (up to 10.1.4). The root cause is that these directives allow decompression of unbounded input, enabling a ZIP bomb to cause a denia...

CVE-2018-16131: Uncontrolled Resource Consumption

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service memory consumption and daemon crash via a ZIP bomb...

PT-2018-13415

Name of the Vulnerable Software and Affected Versions Lightbend Akka HTTP versions 10.0.x through 10.0.13 Lightbend Akka HTTP versions 10.1.x through 10.1.4 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon crash, via a ZIP bomb...

akka HTTP Detection

Detection of akka HTTP server. The script sends a connection request to the server and attempts to detect akka HTTP server and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

akka HTTP DoS Vulnerability

akka HTTP is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:akka:http"; if descripti...

CVE-2017-1000118

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

CVE-2017-1000118

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

Design/Logic Flaw

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

CVE-2017-1000118: Improper Restriction of Operations within the Bounds of a Memory Buffer

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

ca.schwitzer:scaladon_2.12 (>=0.3.0, <=0.4.0-m0), ch.megard:akka-http-cors_2.12 (>=0.1.9, <=0.2.1) +120 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-rc2, <=10.0.5)

com.typesafe.akka:akka-http-core2.12 MAVEN version =10.0.0-rc2, =0.3.0, =0.1.9, =0.1.4, =4.0, =0.2.0, =3.0.7, =3.0.6, =0.11.1, =0.10.2, =0.13.0, =0.10, =0.10, =0.2.0, =0.2.1 - com.github.hayasshi:akkahttpeasyrouter2.12 0.0.1 and more Source cves: CVE-2017-1000118 Source advisory:...

CVE-2017-1000118

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

ca.schwitzer:scaladon_2.11 (>=0.3.1, <=0.4.0-m0), ch.becompany:akka-social-stream_2.11 (>=0.1.0, <=0.1.1) +285 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.11 (>=2.4-artery-m1, <=10.0.5)

com.typesafe.akka:akka-http-core2.11 MAVEN version =2.4-artery-m1, =0.3.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.0.0, =1.2.2, =0.5.4, =0.1.4, =4.0, =0.0.1, =0.2.0, =0.3.1 - com.geeoz.atom:atom-oauth2.11 0.3.2 and more Source cves: CVE-2017-1000118 Source advisory: MEND:CVE-2017-1000118...