CERT24GHSA-r4j5-9xpp-3985 — Tornado: event-loop blocking and excess memory use from chunked bodies with many small chunksLoading data…
CERT24Threat Observatory
Period

GHSA-r4j5-9xpp-3985 — Tornado: event-loop blocking and excess memory use from chunked bodies with many small chunks

Tornado can block the event loop and use substantially more memory when processing HTTP/1.1 request bodies with chunked transfer encoding and many small chunks. The impact can cause availability problems and can be triggered without authentication.

← Back to intelligence

GHSA-r4j5-9xpp-3985 — Tornado: event-loop blocking and excess memory use from chunked bodies with many small chunks

Tornado can block the event loop and use substantially more memory when processing HTTP/1.1 request bodies with chunked transfer encoding and many small chunks. The impact can cause availability problems and can be triggered without authentication.