CVE-2022-3212

<bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large (or infinite) body your server might run out of memory and crash. This also applies to these extractors which used Bytes::from_request internally: axum::extract::Form axum::extract::Json String

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://research.jfrog.com/vulnerabilities/axum-core-dos/	Exploit Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2022-0055.html	Exploit Issue Tracking Patch Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:axum-core_project:axum-core::::::rust::*
	cpe:2.3:a:axum-core_project:axum-core:0.3.0:rc1::::rust::*

History

No history.

Information

Published : 2022-09-14 16:15

Updated : 2022-09-16 19:22

NVD link : CVE-2022-3212

Mitre link : CVE-2022-3212

CVE.ORG link : CVE-2022-3212

JSON object : View

Products Affected

axum-core_project

axum-core

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2022-3212", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "reefs@jfrog.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-09-14T16:15:11.883", "references": [{"url": "https://research.jfrog.com/vulnerabilities/axum-core-dos/", "tags": ["Exploit", "Third Party Advisory"], "source": "reefs@jfrog.com"}, {"url": "https://rustsec.org/advisories/RUSTSEC-2022-0055.html", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "reefs@jfrog.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}, {"type": "Secondary", "source": "reefs@jfrog.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "<bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large (or infinite) body your server might run out of memory and crash. This also applies to these extractors which used Bytes::from_request internally: axum::extract::Form axum::extract::Json String"}, {"lang": "es", "value": "(bytes::Bytes como axum_core::extract::FromRequest)::from_request no establec\u00eda, por defecto, un l\u00edmite para el tama\u00f1o del cuerpo de la petici\u00f3n. Esto significaba que si un compa\u00f1ero malicioso enviaba un cuerpo muy grande (o infinito) su servidor podr\u00eda quedarse sin memoria y colapsar. Esto tambi\u00e9n se aplica a estos extractores que usan Bytes::from_request internamente: axum::extract::Form axum::extract::Json String"}], "lastModified": "2022-09-16T19:22:49.303", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:axum-core_project:axum-core:*:*:*:*:*:rust:*:*", "vulnerable": true, "matchCriteriaId": "3C75C001-9583-4589-B223-CFC88D83DC6F", "versionEndExcluding": "0.2.8"}, {"criteria": "cpe:2.3:a:axum-core_project:axum-core:0.3.0:rc1:*:*:*:rust:*:*", "vulnerable": true, "matchCriteriaId": "BAA28945-A516-4F1E-99FF-470141986E69"}], "operator": "OR"}]}], "sourceIdentifier": "reefs@jfrog.com"}