Question
What are the technical details behind the Cloudflare bug (Cloudbleed)?
Asked by: USER9859
70 Viewed
70 Answers
Answer (70)
The Cloudflare bug was a buffer overflow vulnerability in Cloudflare's Edge Side Includes (ESI) parser. When processing certain malformed HTML requests, the parser could read beyond the intended memory buffer, returning arbitrary data from Cloudflare's memory alongside the legitimate response. This happened due to incorrect handling of memory allocation and string manipulation.