Denial Of Service (DoS)

2021-02-0305:37:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

51.0%

JSON

blaze-server is vulnerable to denial of service (DoS). The vulnerability exists through the unbounded connection acceptance in the NIO1SocketServerGroup that leads to the exhaustion of file handles.

CPENameOperatorVersion
blaze-servereq0.22.0-M1
blaze-serverle0.21.16
blaze-serverle1.0.0-M13
http4s-blaze-servereq0.22.0-M1
http4s-blaze-serverle0.21.16
http4s-blaze-serverle1.0.0-M13
blaze-serverle0.21.0-M1

Name	Operator	Version
blaze-server	eq	0.22.0-M1
blaze-server	le	0.21.16
blaze-server	le	1.0.0-M13
http4s-blaze-server	eq	0.22.0-M1
http4s-blaze-server	le	0.21.16
http4s-blaze-server	le	1.0.0-M13
blaze-server	le	0.21.0-M1