Erlang lib/net HTTP max_body_size validation flaw leading to DoS

脆弱性概要 脆弱性名称：受信データチャンクに対して が正しく適用されていないため、チャンク受信時にサイズチェックが行われない可能性があり、メモリオーバーフローやサービス停止（DoS）が発生する恐れがある。 脆弱性タイプ：入力検証の欠陥（CWE-1283 / CWE-20） 影響範囲： 内の 関数が の有効な検証を行っていない。 が 0 に設定されているか、未設定の場合、任意サイズのデータチャンクを受け入れてしまう可能性がある。 修正方案： に の検証ロジックを追加し、データチャンクのサイズが の制限を超えないようにする。 主要コードブロック（POC／利用コード） ```erlang %% 修正前（脆弱性あり） decode_size(Data, MaxBodySize) when is_binary(Data) -> {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, >), {ok, Size} = binary:match(Data, <<0

目標達成すべての支援者に感謝 — 100%達成しました！

Erlang lib/net HTTP max_body_size validation flaw leading to DoS

このソースからの他の記事

目標達成 すべての支援者に感謝 — 100%達成しました！

Erlang lib/net HTTP max_body_size validation flaw leading to DoS

このソースからの他の記事

目標達成すべての支援者に感謝 — 100%達成しました！