CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
A kind of CWE-405 Asymmetric Resource Consumption (Amplification).
From the CWE List. © The MITRE Corporation.
Newest
- ericsson codechecker Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics 4.9 Medium
- silviucpp ezstd Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer 6.9 Medium
- kyverno Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression 8.7 High
- kyverno Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression 8.7 High
-
libfurl-perlDebian Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses 7.5 High - gitea Gitea Helm chart upload decompression denial of service No score
- kubeflow pipelines Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory 7.5 High
- apache software foundation kafka Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service 6.5 Medium
- tanium enforce Tanium addressed a compression bomb vulnerability in Enforce. 7.5 High
- crossbario autobahn-python Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) 5.9 Medium
- appsup-dart jose Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2 6.9 Medium
- mattermost, mattermost server +1 more Unbounded memory consumption during PDF text extraction 6.5 Medium
- benoitc hackney Unbounded response body buffering and decompression in hackney 8.2 High
- mtrudel bandit HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit 8.7 High
- vllm vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions 7.1 High
- labstack echo Echo: Decompress permits unbounded gzip expansion in v4 8.2 High
- openstack ironic OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a... 4.3 Medium
- nationalsecurityagency ghidra Ghidra before 12.2 Denial of Service via Compressed Extension Archive 6.8 Medium
- nationalsecurityagency ghidra Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive 6.8 Medium
- smilecdr hapi fhir SmileCDR HAPI FHIR improper data decompression 8.7 High
- arekinath esaml Unbounded SAML message decompression in esaml allows memory exhaustion 8.7 High
- python pillow Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) 6.5 Medium
- python pillow Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS 7.1 High
- encode django-rest-framework Django REST framework: JSONParser applies an attacker-named codec to the request stream 7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 more Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml 6.2 Medium
- apache software foundation couchdb Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session 7.7 High
- python pillow Pillow: MSP RLE decoder expands a tiny file into unbounded memory 8.7 High
- fleetdm fleet Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression 8.7 High
- eclipse vert.x In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... 8.7 High
- juniper networks junos os Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled 7.1 High
- commvault cloud Network messaging layer decompression resource exhaustion 8.7 High
- erlang rebar3, hexpm hex, hex core +2 more hex_core decompresses registry and Erlang term API responses without size limits 2.1 Low
- getgrav grav Grav before 2.1.7 Memory Exhaustion via Oversized Image Transforms 7.1 High
- open-webui Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image 7.1 High
- hexpm hex Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirror 2.1 Low
- gumlet php-image-resize Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs 8.7 High
- sgl-project sglang SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor 8.7 High
- sgl-project sglang SGLang through 0.5.21 Audio Decompression Amplification via load_audio 8.7 High
- opendocman OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction 5.3 Medium
- grafana enterprise, oss, nanogit +2 more Git Sync memory exhaustion via a malicious Git server 5.3 Medium
- apache cxf Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb) 7.5 High
- cisa malcolm Improper Handling of Highly Compressed Data in Malcolm 6.5 Medium
- asynchttpclient async-http-client AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled 7.5 High
- imagemagick ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data 5.3 Medium
- openbsd openssh In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length... 6.5 Medium
- docling, docling-project docling-slim +1 more Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) 4.3 Medium
-
praxis-proxycrates.io Praxis affected by HTTP/2 Bomb 7.5 High - apache software foundation thrift Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize 6.9 Medium
- apache software foundation thrift Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame 8.2 High
- apache software foundation thrift Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up 8.2 High
- Show olderLoading…