Uncontrolled resource consumption in github.com/tendermint/tendermint
Vulnerability Description
Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25072
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- @guagualvcha
Affected Vendor
github.com/tendermint/tendermint
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.