Regular Expression Denial Of Service (ReDoS)

2022-07-2507:55:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

mxnet

vulnerability

regular expression

EPSS

0.001

Percentile

38.4%

JSON

mxnet is vulnerable to regular expression denial of service. The vulnerability exists in get_kernel function of rtc.py due to improper handling of regular expressions which allows an attacker to send a specially crafted operator name causing a excessive resource consumption which then leads to an application crash.