[CVE-2021-32763] Giới thiệu về kỹ thuật Regular Expression Denial of Service
blog.viettelcybersecurity.com | vulnerability | CVE-2021-32763 | #regex | #vulnerability-analysis | #dos | #redos | #cve-2021-32763 | #openproject
Summary
Using CVE-2021-32763, a ReDoS in OpenProject, as a case study, the author explains regex denial of service through NFA/DFA theory and how evil regexes trigger catastrophic backtracking.
- CVE
- CVE-2021-32763
- Published
- Collected
--- id: 7375 title: "[CVE-2021-32763] Giới thiệu về kỹ thuật Regular Expression Denial of Service" cve: CVE-2021-32763 source_domain: blog.viettelcybersecurity.com source_url: "https://blog.viettelcybersecurity.com/gioi-thieu-ve-ky-thuat-regular-expression-denial-of-service/" published_at: "2021-09-23T07:49:20Z" tags: ["regex", "vulnerability-analysis", "dos", "redos", "cve-2021-32763", "openproject"] phying_url: "https://phying.com/item/7375" lang: en --- # [CVE-2021-32763] Giới thiệu về kỹ thuật Regular Expression Denial of Service ## Summary Using CVE-2021-32763, a ReDoS in OpenProject, as a case study, the author explains regex denial of service through NFA/DFA theory and how evil regexes trigger catastrophic backtracking. ## Intelligence Metadata - **Sources:** blog.viettelcybersecurity.com - **CVE:** CVE-2021-32763 - **Published:** 2021-09-23T07:49:20Z - **Original:** https://blog.viettelcybersecurity.com/gioi-thieu-ve-ky-thuat-regular-expression-denial-of-service/ - **Phying News:** https://phying.com/item/7375