CodeQL query to detect insecure MaxLengthRequest values in ASP.NET applications

[cldrn]

Report

ASP.NET applications with large MaxLengthRequest are vulnerable to denial of service attacks. The recommended value by Microsoft is 4096 KB (4 MB) so anything larger than that gets flagged as a warning. This checks corresponds to CWE-016 which didn't exist previously in QL and corresponds to common insecure configurations.

This issue is still commonly found in ASP.NET applications and have been related to the mitigations of other CVEs in the past such as:

• MS11-100 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100)
• MS14-009 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-009)
• And possibly others.

CodeQL query PR: github/codeql#2355

[xcorail]

Overall Rating: Low
Paid