CVE-2018-16470: Uncontrolled Resource Consumption

November 13, 2018 (updated October 9, 2019)

There is a possible DoS vulnerability in the multipart parser in Rack. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.

References

nvd.nist.gov/vuln/detail/CVE-2018-16470

Code Behaviors & Features

Detect and mitigate CVE-2018-16470 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →