Imagemagick/File upload abuse causing my memory errors

Posted by kidcapital on Server Fault See other posts from Server Fault or by kidcapital
Published on 2012-11-01T05:02:55Z Indexed on 2012/11/01 5:04 UTC
Read the original article Hit count: 156

Filed under:

ddos

|

upload

|

memory-leak

|

imagemagick

I had been running out of memory on my server lately and I noticed some individuals uploading the same "file" over and over in quick succession which locks up my instance of mini_magick. Eventually the morgify gets stuck in an infinite look. I've taken care of it by having a daemon watch the morgify process if it get's out of control, but was wondering if there was a better solution enter image description here

You can see the same *.gif being uploading in quick succession. I tried downloading this file too, and it isn't even a gif. I don't know what it is (I can't open it). Anyone experience this kind of exploit before?

© Server Fault or respective owner

Related posts about ddos

How long do DDoS attacks last?

as seen on Server Fault - Search for 'Server Fault'
I realize the answer to this question will vary, which is why I'm asking it. If you've suffered a DDoS attack before - how long did it last? Just trying to get an idea of how long we'll have to continue to wage this battle (going on a couple weeks now). >>> More
DDoS and Heroku

as seen on Server Fault - Search for 'Server Fault'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Brainstorm: Flood/DoS/DDoS Attack prevention ideas.

as seen on Server Fault - Search for 'Server Fault'
This is not a question asking how to stop an attack. This is simply a thread for anyone and everyone to discuss ideas for preventing, dealing with, and keeping your server alive during these attacks. Do not discuss using 3rd party software, this is a place to make your own ideas and read others. Post… >>> More
DDoS and Heroku

as seen on Stack Overflow - Search for 'Stack Overflow'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Anti-DDoS Question

as seen on Server Fault - Search for 'Server Fault'
Our company´s main owner (telecon group) wants us to deploy anti-DDoS mechanisms, such as Arbor Pravail, which is a great idea. Although... I have a question... If our main ISP Backbone provider have no anti-DDoS mechanism, means that there is no point we get the Arbor Pravail? An DDoS attack can… >>> More

Related posts about upload

PHP File Upload second file does not upload, first file does without error

as seen on Stack Overflow - Search for 'Stack Overflow'
So I have a script I have been using and it generally works well with multiple files... When I upload a very large file in a multiple file upload, only the first file is uploaded. I am not seeing an errors as to why. I figure this is related to a timeout setting but can not figure it out - Any… >>> More
Upload multiple Images and Ping an address to upload them

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello! I am trying to allow administrators to upload 20-30 images in one go. I have tried jquery uploadify, SWFUpload and other various jquery scripts. However I have had many issues doing this. Uploadify worked fine, however it stopped working and after a day of debugging I couldn't figure out… >>> More
Upload an image using class.upload.php via AJAX, display image in form using jQuery

as seen on Stack Overflow - Search for 'Stack Overflow'
I am using class.upload.php to handle an image upload from a form that submits employee details to a MySQL database. class.upload.php does EXACTLY what I want it to do, resize the image and rename it - what I am now trying to accomplish is to upload via Ajax after the user selects the file and then… >>> More
Upload File to Windows Azure Blob in Chunks through ASP.NET MVC, JavaScript and HTML5

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Originally posted on: http://geekswithblogs.net/shaunxu/archive/2013/07/01/upload-file-to-windows-azure-blob-in-chunks-through-asp.net.aspxMany people are using Windows Azure Blob Storage to store their data in the cloud. Blob storage provides 99.9% availability with easy-to-use API through .NET SDK… >>> More
javascript replace text with images problem

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm extremely new to JS and have this code that I'm trying to tweak. WHen I was adding the array, I had tested it with only a couple of items and it was working fine, now it just doesn't work, and I can't figure out what is wrong with it!! Basically, I'm trying to change every instance of a card… >>> More