DoS attack possible when reading from CRLDistributionPoints
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
In cfssl/revoke/revoke.go, there are multiple places which use ioutil.ReadAll to read the CRL. If a rogue certificate is sent with a CRLDistributionPoint to http://mal-server/100G.file, then this code will consume all memory.
There should be a way to configure the maximum size of a CRL in order to prevent this type of attack.
Contributor guide
Assessment
This issue has not been assessed yet.