Denial Of Service

2023-09-1207:23:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

argocd

denial of service

vulnerability

size validation

malicious file

low privileges

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.7%

JSON

ArgoCD is vulnerable to Denial of Service. The vulnerability is due to a lack of size validation when extracting user-controlled tar.gz files in the repo-server component. The vulnerability could allow an attacker with low privileges to send a malicious tar.gz file leading to denial of service.