CVE-2017-15010: Uncontrolled Resource Consumption

October 4, 2017 (updated June 12, 2019)

An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.

References

www.securityfocus.com/bid/101185
github.com/salesforce/tough-cookie/issues/92
nvd.nist.gov/vuln/detail/CVE-2017-15010

Code Behaviors & Features

Detect and mitigate CVE-2017-15010 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →