Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5355
HistoryNov 01, 2017 - 5:32 a.m.

Large GZip Denial Of Service (DoS)

2017-11-0105:32:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

41.3%

superagent is vulnerable to large GZip denial of service (DoS) attacks aka ZIP bomb attacks. The attacks can be triggered when malicious HTTP servers send extremely large responses in a compressed form. Since the client does not limit the size of responses, it will end up consuming large amounts of CPU and memory upon the processing of such responses.

CPENameOperatorVersion
superagentle3.6.3

0.001 Low

EPSS

Percentile

41.3%