Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing
概要
Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations (form_data() method and Extractible macro) do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory (OOM) conditions by sending extremely large payloads, leading to service crashes and denial of service. Version 0.89.3 contains a patch.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com