NRDAX-T0096 - GraphQL Nested Query Depth CPU Exhaustion

network-rpc · active · first seen 2020-01-01

provenance: Catalogued from public disclosure; not yet reproduced

mechanism

GraphQL Nested Query Depth CPU Exhaustion

instances (0)

chain	primitive	fidelity	origin	reproducer (bundle)	source

references

ghsa: GHSA-cgxm-vr2f-6fj8

vendor-advisory: GHPR-ethereum-go-ethereum-32344

related (network-rpc)

NRDAX-T0008 - Authorization Check Bypass RCE active NRDAX-T0009 - Bit-Length Validation Panic active NRDAX-T0029 - Concurrent RPC Race Nil-Deref Panic active NRDAX-T0035 - Contract Activation Compute Exhaustion active NRDAX-T0036 - Contract Execution Engine Crash active NRDAX-T0045 - Declare Transaction Compilation CPU Exhaustion active NRDAX-T0052 - DNS Rebinding SSRF Bypass active NRDAX-T0054 - DNSSEC Validation Bypass Cache Poisoning active

cite

https://nrdax.com/techniques/NRDAX-T0096

plain

NRDAX Registry. Technique NRDAX-T0096.

bibtex

@misc{nrdax_NRDAX_T0096,
  title = {GraphQL Nested Query Depth CPU Exhaustion (NRDAX-T0096)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0096},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0096",
  "type": "dataset",
  "title": "GraphQL Nested Query Depth CPU Exhaustion (NRDAX-T0096)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0096",
  "publisher": "NRDAX Registry"
}