Asymmetric denial of service In grafana
Description
A flaw was found in zod. A remote attacker can trigger a denial of service (DoS) by submitting an excessively large array of invalid items to an application that validates input schemas without length constraints. Because the validation process accumulates error records for each failing element without a cap or early exit, the application consumes excessive memory and crashes due to an out-of-memory condition.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
rpm rhel10 | |
rpm rhel9 | |
rpm rhel10 |
Aliases
1. 2. 3.