tiny-web-server
tiny-web-server copied to clipboard
Very simple DoS
There seems to be no timeout on the connections. Since every connection takes up a whole thread, this is a very simple DoS vurnability.
To make matters worse, because the file descriptor gets closed when a connection is closed, all the io calls get non blocking. This causes 100% cpu load. Connecting a few times and disconnecting without sending anything causes the server to max out their cpu usage.
I can confirm the above. My fuzzer triggered the issue in less than 1800 requests.