Armeria SAML decoder can exhaust memory and cause denial of service
A Java server component can be made to stop by malicious messages.
Summary
armeria-saml decompresses SAML messages in the HTTP-Redirect binding without limiting output size before signature validation. An unauthenticated remote attacker can exhaust server memory and stop the service; versions prior to 1.43.0 are affected.
Affected when
- armeria-saml HTTP-Redirect binding in use
What to do
Update armeria-saml to 1.43.0 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen