Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39248
HistoryFeb 14, 2023 - 2:05 a.m.

Denial Of Service (DoS)

2023-02-1402:05:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
software vulnerability
dos
memory leaks
application crash
input data
hamt directory nodes

0.001 Low

EPSS

Percentile

38.0%

github.com/ipfs/go-unixfs is vulnerable to Denial Of Service (DoS). The vulnerability exists because hamt.go doesn’t properly handle malformed HAMT structures while reading data in the bogus fanout parameter in the HAMT directory nodes, which leads to memory leaks, allowing an attacker to cause an application crash through maliciously crafted input data.

0.001 Low

EPSS

Percentile

38.0%

Related for VERACODE:39248