Denial Of Service (DoS)

2023-05-1104:13:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

denial of service

out of memory

application crash

archive metadata

EPSS

0.001

Percentile

50.3%

JSON

github.com/sigstore/rekor is vulnerable to Denial Of Service (DoS). The vulnerability exists because the archive metadata file size is not checked before the files are read to memory which can lead to out of memory conditions resulting in an application crash.