Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Denial of Service vulnerability on servers with 4GB of ram or less #6716

Closed
Jnewbon opened this issue Jul 10, 2020 · 0 comments
Closed

Denial of Service vulnerability on servers with 4GB of ram or less #6716

Jnewbon opened this issue Jul 10, 2020 · 0 comments
Labels
bug
Milestone
Sprint 2020-07-13

Comments

@Jnewbon
Copy link
Contributor

Jnewbon commented Jul 10, 2020 •
edited

Problem: A denial of service vulnerability was discovered for synergys from an unauthenticated source that could crash the process if there was less the 4gb of ram available
GHSA-chfm-333q-gfpp

Solution: Catch the bad_alloc before it can escape into the server and cause the process to exit.
Jnewbon added a commit that referenced this issue Jul 14, 2020
@Jnewbon
#6716 Added try catch around memory allocation
59e63f5
Jnewbon added a commit that referenced this issue Jul 14, 2020
@Jnewbon
#6716 Changed throw to pass exception to caller and handle it there u…
bdd36c3 
…pdated debug message
@Jnewbon Jnewbon changed the title Placeholder Issue Denial of Service vulnerability on servers with 4GB of ram or less Jul 14, 2020
Jnewbon added a commit that referenced this issue Jul 14, 2020
@Jnewbon
#6716 Updated changelog
285dfda 
Signed-off-by: Jamie Newbon <jamie@symless.com>
@Jnewbon Jnewbon added this to the Sprint 2020-07-13 Jedi milestone Jul 14, 2020
@Jnewbon Jnewbon closed this as completed Jul 14, 2020
@Jnewbon Jnewbon mentioned this issue Aug 25, 2020
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
Sprint 2020-07-13
Development

No branches or pull requests
1 participant
@Jnewbon