CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
A kind of CWE-405 Asymmetric Resource Consumption (Amplification).
From the CWE List. © The MITRE Corporation.
Newest
- python pillowPillow vulnerable to Data Amplification attack.7.5 High
- splunk, splunk enterprise, universal forwarders +1 more +3 moreMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input5.5 Medium
- envoyproxy envoyZip bomb vulnerability in Envoy7.5 High
- superagent project superagent, hackerone superagent node module +1 moresuperagent vulnerable to zip bomb attacks5.9 Medium