Threats tagged 'ghsa-x9m8-9g38-v659'

A vulnerability in libmodulemd affects builds with rpmio support enabled, where compressed modulemd YAML is decompressed without enforcing a cumulative decompressed-size limit. This flaw allows an attacker supplying a highly compressible compressed YAML file to cause excessive CPU and memory consumption, resulting in a denial of service. The vulnerability impacts availability only and requires local access with rpmio-enabled builds processing attacker-controlled compressed module metadata.