Velociraptor Resource Exhaustion Vulnerability Allowing Server Crash via Out-of-Memory Conditions

A resource exhaustion vulnerability has been identified in Velociraptor versions prior to 0.76.4. This vulnerability resides in the server's agent control channel, where a compromised or rogue Velociraptor client can send crafted messages through the normal client communication channel. These messages can overwhelm the server, leading to a crash by causing out-of-memory conditions.

Impact

Exploitation of this vulnerability can cause the Velociraptor server to crash, leading to a denial-of-service condition.

Remediation

Users can upgrade to Velociraptor version 0.76.4 or 0.75.9, depending on their current version. Instructions for upgrading a Velociraptor server are available in the Velociraptor documentation.