Emdros contains a flaw that may allow a local denial of service. The issue is triggered due to certain memory leaks within the MQL parser. By issuing a specially crafted request, a malicious user could cause the application to consume all available memory resulting in a loss of availability.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
Solution
Upgrade to version 1.2.22 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.