Uncontrolled resource consumption in github.com/tendermint/tendermint

CVE-2019-25072

What is CVE-2019-25072?

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.

References