Resource exhaustion in Minalic
CVE-2024-58306
minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.
Vulnerability class: DoS (Denial of Service)
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (40.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 40th percentile — 40.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Minalic — versions 2.0.0
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/51917 (exploit)
- minalic.sourceforge.net/ (technical-description)
- www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-… (third-party-advisory)