Lucene search
Veracode Vulnerability DatabaseVERACODE:47432HistoryJun 10, 2024 - 5:59 a.m.
Denial Of Service (DoS)
2024-06-1005:59:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
denial of service
vulnerability
http requests
memory consumption
zip bomb
server attack
AI Score
7
Confidence
High
go.opentelemetry.io/collector/config/configgrpc is vulnerable to Denial Of Service (DoS). The vulnerability is due to compressed HTTP requests which can be maliciously designed to crash the system by consuming excessive memory. Attackers can exploit this by sending specially crafted “zip bomb” requests that expand massively upon decompression, leading to out-of-memory conditions on the server.
AI Score
7
Confidence
High