Actions
Security #6306
closed
PA
PA
mime: quadratic complexity in MimeDecAddEntity
Security #6306:
mime: quadratic complexity in MimeDecAddEntity
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
CRITICAL
Disclosure Date:
GHSA:
Description
Found by quadfuzz
500 kilobytes pcap takes 40 seconds to process, just spending time adding to a linked list
The fuzz input to fuzz_mimedecparseline is
content-Type:;boundary=; -- -- --
With the lines repeating many times
Solution to add to a linked list should be to keep the tail known
Files
Actions