217 questions
Advice
0
votes
2
replies
50
views
TensorFlow models DoS via input-controlled tensor sizes?
Running untrusted TensorFlow models and noticed this:
import tensorflow as tf
import time
class TestLayer(tf.keras.layers.Layer):
def call(self, inputs):
n = tf.cast(inputs[0][0], tf....
0
votes
0
answers
57
views
UN/EDIFACT parser security: DoS vectors possible with malicious documents?
I'm still learning EDIFACT. And while reviewing EDIFACT parser software, I'm wondering if it's possible, within UN/EDIFACT Syntax, to build a document that expands and blows up when parsed?
Known XML ...
0
votes
2
answers
802
views
Snyk denial of service: utp:[email protected] > io.grpc:[email protected] > io.netty:[email protected]
I've encountered a vulnerability after running the Snyk open source security management tool and am not sure how to resolve it.
I believe this is related to a library pulled in by the Android Gradle ...
- 7,064
0
votes
0
answers
124
views
In a custom network protocol that prepends messages with their length, how do you prevent malicious packets from causing memory exhaustion?
For learning purposes, I'm writing a basic network protocol over TcpStreams. In order to delimit individual messages, I was using read_until, but because the data sent can contain any bytes, this can'...
- 348
1
vote
1
answer
135
views
In Java, how to write a TCP server with defense of slow TCP attacks?
In Java, the simple way to write a TCP server is to use the ServerSocket class. When using the ServerSocket class, the server program calls the accept() method of this class to get an object of the ...
- 661
0
votes
1
answer
409
views
Denial of service: regular expression
When we send this code to fortify scan
int len=inputString.length();
Pattern p= Pattern.compile("[0-9]{"+Integer.toString(len-1)+"}");
The second line is vulnerable to Denial of ...
- 9
0
votes
0
answers
52
views
Sonar scan reports issue in Regex [duplicate]
This line of code in java is reported by sonar scan as a Security hotspot risk under Denial of Service (DoS) category.
name.matches("^.*[^a-zA-Z0-9 \\\\].*$")
How can I fix this? Is there ...
- 83
0
votes
0
answers
99
views
Denial of service protection: how to reject connections based on content and frequency (golang as example)
I run a p2p service (so no webserver, no load balancing with DOS functionality, etc.), which receives direct connection requests.
I want to reject connections when the exact same message has been sent ...
- 6,410
2
votes
2
answers
4k
views
Regex vulnerable to polynomial runtime
How do I improve this code? SonarQube is highlighting that the regex pattern that could become really slow and produce denial of service. Here's the code:
// Single quotes
// Double quotes
// ...
- 1,083
3
votes
1
answer
923
views
Why is a StackOverflowError worth a CVE?
Recently, vulnerability reports are accumulating against (Java) libraries that complain that the library offers a recursive function that may exhaust the available stack depth and cause a ...
- 637
1
vote
2
answers
3k
views
Convert pixels to cm using Python
I would like to know what am I doing wrong with this code :
if self.digital:
im = Image.open(os.path.join(folder, filename))
width, height = im.size
image_info["width"] = round(...
- 21
0
votes
0
answers
99
views
SonarQube: denial of service for regex pattern due to polynomial runtime backtracking [duplicate]
I am using a regex pattern to validate an email. SonarQube is giving "Make sure the regex used here,which is vulnerable to polynomial runtime due to backtracking, cannot lead to denial of service&...
-3
votes
2
answers
306
views
How is expanding %(describe) during a git archive a denial-of-service (DOS) risk?
The gitattributes man page says:
Creating an archive
export-subst
If the attribute export-subst is set for a file then Git will expand several placeholders when adding this file to an archive. [...] ...
- 65
1
vote
1
answer
1k
views
Checkmarx Resource Exhaustion in Golang url.Parse
I'm getting Checkmarx issue:
The resource Parse allocated by FUNCTION_X in the file FILE at line LINE is prone to resource exhaustion when used by FUNCTION_Y in the file FILE at line LINE.
I can see ...
- 21
0
votes
1
answer
2k
views
Preconditions for SpEL DoS vulnerability CVE-2022-22950?
I'm a little confused about CVE-2022-22950 and the corresponding Spring advisory. The latter says that the vulnerability can be exploited through:
[...] specially crafted SpEL expression [...]
...
- 23