Details
-
Work Item
-
Status: Done
-
Critical
-
Resolution: Fixed
-
None
-
GreenHopper Ranking:0|i2peuj:
-
9223372036854775807
Description
Denial Of Service (DoS) in Talend/cloud-components (master)
Issue Details
- Vulnerability: Denial Of Service (DoS)
- Severity: High
- Project: Talend/cloud-components
- Branch: master
- Scan Date: Unknown
Issue Description
protobuf is vulnerable to Denial Of Service (DoS). The vulnerability is due to multiple instances of non-repeated embedded message inputs with repeated or unknown fields which cause the objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses.