Skip to content

security: malicious commands can exhaust resources of the host os #78

Description

@HackingRepo

Hi, @sylvestre and in general uutils mainteners

we found that the playground have 2 flaws that lead to resource exhaustation, example https://uutils.org/playground/?cmd=seq%201%209999999999999999999 and https://uutils.org/playground/?cmd=truncate%20--size%2020G%20a can exhaust the host memory and killing the browser process via OOM as i confirmed via firefox

the malicious commands is truncate --size 20G a and seq 1 9999999999999999999 they able kill the browser process entirely

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions