Denial Of Service (DoS)

2022-08-0204:06:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

39.3%

JSON

openzeppelin is vulnerable to denial of service (DoS) attacks. A malicious user is able to use a target contract of an EIP-165 supportsInterface query to cause unbounded resource consumption by returning a lot of data, causing the application to crash .

CPENameOperatorVersion
@openzeppelin/contractsle4.4.1
@openzeppelin/contracts-upgradeableeq4.4.1
@openzeppelin/contractsle4.7.1
@openzeppelin/contracts-upgradeablele4.7.1
openzeppelin-ethle2.2.0
openzeppelin-solidityle4.6.0
@openzeppelin/contractsle4.4.1
@openzeppelin/contracts-upgradeableeq4.4.1
@openzeppelin/contractsle4.7.1
@openzeppelin/contracts-upgradeablele4.7.1

Name	Operator	Version
@openzeppelin/contracts	le	4.4.1
@openzeppelin/contracts-upgradeable	eq	4.4.1
@openzeppelin/contracts	le	4.7.1
@openzeppelin/contracts-upgradeable	le	4.7.1
openzeppelin-eth	le	2.2.0
openzeppelin-solidity	le	4.6.0
@openzeppelin/contracts	le	4.4.1
@openzeppelin/contracts-upgradeable	eq	4.4.1
@openzeppelin/contracts	le	4.7.1
@openzeppelin/contracts-upgradeable	le	4.7.1