Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47551
HistoryJun 14, 2024 - 8:49 a.m.

Denial Of Service (DoS)

2024-06-1408:49:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
vulnerability
zstd
decompression
grpc
memory usage
server
client

7 High

AI Score

Confidence

High

github.com/klauspost/compress/zstd is vulnerable to a Denial of service (DoS). The vulnerability is due to its zstd decompression implementation not respecting the limits imposed by gRPC, which allows attacker to trigger rapid and uncontrolled increases in memory usage on the server or client.

7 High

AI Score

Confidence

High