Out-of-bounds Write
Akka HTTP can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a `User-Agent` header with deeply nested comments.
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id
674
name
Uncontrolled Recursion
description
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
2
cwe_id
937
name
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id
787
name
Out-of-bounds Write
description
The product writes data past the end, or before the beginning, of the intended buffer.