File size: 1,385 Bytes
4045729 b9f8864 4045729 b9f8864 4045729 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 | ---
tags:
- security
- proof-of-concept
- protobuf
license: mit
---
# Protocol Buffers MonitoredResourceDescriptor labels materialization DoS PoC
This repository contains a benign security research PoC for a protobuf binary
artifact that drives large repeated-message materialization during
`google.api.monitored_resource_pb2.MonitoredResourceDescriptor.ParseFromString(...)`.
Files:
- `control_one_type.pb`
- `malicious_labels_5000000.pb`
- `reproduce.py`
Observed behavior:
- control artifact:
- parses successfully with zero `labels`
- `type_len = 9999995`
- malicious artifact:
- both files are `10,000,000` bytes
- parses successfully with `5,000,000` `labels` entries
- increases peak RSS by about `330324 kB` in local clean-process replay
- increases peak RSS by `330324 kB` in unauthenticated public replay
Tested runtime:
- `protobuf==7.35.1`
- Python: `/usr/bin/python3`
Public files:
- `https://huggingface.co/hacnho/protobuf-monitoredresourcedescriptor-labels-dos-poc/resolve/main/control_one_type.pb`
- `https://huggingface.co/hacnho/protobuf-monitoredresourcedescriptor-labels-dos-poc/resolve/main/malicious_labels_5000000.pb`
- `https://huggingface.co/hacnho/protobuf-monitoredresourcedescriptor-labels-dos-poc/resolve/main/reproduce.py`
- repo sha: `484eee50fc49748e1979c9a5b9869a6bb5160f6a`
Reproduction:
```bash
python3 reproduce.py
```
|