Lucene search
Veracode Vulnerability DatabaseVERACODE:7392HistoryAug 31, 2018 - 2:42 a.m.
Denial Of Service (DoS) Via Zip Bomb
2018-08-3102:42:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.006
Percentile
79.3%
akka-http is vulnerable to denial of service via a Zip Bomb. The vulnerability is caused by the application not having size limitations on decompressed data from the directives decodeRequest and decodeRequestWith or when using them in combination with directives like entity(as), toStrict, or formField.
Related
prion
prion
Design/Logic Flaw
2018-08-30 13:29:00
cvelist
cvelist
CVE-2018-16131
2018-08-30 13:00:00
cve
cve
CVE-2018-16131
2018-08-30 13:29:00
osv
osv
High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12
2018-10-22 20:37:07
CVE-2018-16131
2018-08-30 13:29:00
openvas
openvas
Akka HTTP 10.0.x, 10.1.x Denial of Service vulnerability
2018-08-31 00:00:00
Akka HTTP < 10.2.7 DoS Vulnerability
2021-11-05 00:00:00
github
github
nvd
nvd
CVE-2018-16131
2018-08-30 13:29:00