CVE-2018-16131

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a…

published August 30, 2018

CVSS
—
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03054 · 87.5th percentile
Published
2018-08-30T13:00Z
EPSS history
Timeline
  • 30 AUG 13:00Z
    The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a…
    cvelistv5