CVE-2017-1000098 | BDVDB-2026-91235 Detail

Description#

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-10-04Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.