intel / intel/gprofiler

Potential resource exhaustion in API client response handling

Open
#1,052 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
826
Forks
79
PR merge metrics
No merged PRs in 30d

Description

A potential resource exhaustion vulnerability has been identified in gProfiler's API client component related to how server responses are handled.

Potential Impact: Under certain conditions involving the configured profiler server, this could lead to:
- Memory exhaustion in the gProfiler process
- Process crash or degraded profiling availability

Contributor guide

Open the contributing guide

Research direction

Locate gProfiler’s API client response-handling entry point and inspect how responses from the configured profiler server are consumed. Reproduce the resource-exhaustion condition, then add a focused regression test and verify that the client remains bounded without degrading profiling availability.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.