MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip file for an assignment submission and indicate its contents should be extracted.
Impact
A highly compressed zip bomb will expand during extraction, consuming disk/CPU and making the service unavailable.
Patches
MarkUs v2.9.4 has addressed this issue.
Credit
Vulnerability discovered and reported by:
MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip file for an assignment submission and indicate its contents should be extracted.
Impact
A highly compressed zip bomb will expand during extraction, consuming disk/CPU and making the service unavailable.
Patches
MarkUs v2.9.4 has addressed this issue.
Credit
Vulnerability discovered and reported by: