AIKIDO-2025-11001
axum-extra is vulnerable to Integer Underflow
41
Medium Risk
This Affects:
axum-extraTL;DR
Affected versions of this package are vulnerable to an integer underflow in the FileStream::try_range_response function when handling empty files, which may lead to denial of service (DoS); this vulnerability occurs due to improper calculation of range responses for zero-size files, causing an integer underflow that can result in memory corruption or application crash. An attacker can exploit this by sending a malicious range request targeting an empty file, triggering the underflow, and potentially crashing the service, thereby causing a DoS condition.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
axum-extra is vulnerable to Integer Underflow in versions 0.1.0 - 0.12.2.
How to fix this
Upgrade the axum-extra library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant