Project

General

Profile

Actions
Copy link

Security #8725

closed
PA PA

doh2: quadratic complexity due to buffer not being reset

Security #8725: doh2: quadratic complexity due to buffer not being reset

Added by Philippe Antoine about 1 month ago. Updated 9 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Label:
CVE:
2026-71418
Git IDs:
Severity:
HIGH
Disclosure Date:
GHSA:
GHSA-xjgq-3qw4-jp5f

Description

Found by oss-fuzz
https://issues.oss-fuzz.com/u/0/issues/530960705

The buffer used to process http2 data frames for DOH2 was not cleared after processing.
That means that multiple HTTP2 data frames with flags EndOfStream made the buffer keep growing until it reached its 65K max, while having a quadratic complexity

Subtasks 1 (0 open — 1 closed)

Security #8726: doh2: quadratic complexity due to buffer not being reset (8.0.x backport)ClosedPhilippe AntoineActions
Actions
Copy link

Also available in: PDF Atom