Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40525
HistoryMay 15, 2023 - 7:07 a.m.

Denial Of Services (DoS)

2023-05-1507:07:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
denial of services
vulnerability
gradle
long ids
application crash

EPSS

0.003

Percentile

68.4%

Gradle is vulnerable to Denial Of Services (DoS). The vulnerability exists because the library’s trusted-key or pgp elements do not properly verify if they use long IDs, which allows an attacker to cause an application crash by submitting the long IDs (64 bits).