Page MenuHomeVyOS Platform

bash: fix unbounded brace expansion DoS (V-004)
Closed, InvalidPublic

Description

Summary

Brace expansion in vyatta-bash can generate very large result sets from compact input, causing excessive CPU and memory use. This task tracks adding defensive bounds to brace expansion growth.

Example

Inputs with repeated brace groups can grow combinatorially, for example:

echo {a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}{a,b}

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)