cve.bz

CAPEC-572

Artificially Inflate File Sizes

Medium severityHigh likelihoodStandard pattern

An adversary modifies file contents by adding data to files for several reasons. Many different attacks could “follow” this pattern resulting in numerous outcomes. Adding data to a file could also result in a Denial of Service condition for devices with limited storage capacity.

Ask an AI about this attack pattern

Show the promptExplain the attack pattern CAPEC-572: Artificially Inflate File Sizes: how it unfolds, what it needs and how to prevent and detect it in my systems. Use https://capec.mitre.org/data/definitions/572.html and https://cve.bz/cve/capec/572?via=ask-ai-copy, which lists recent CVEs with the weaknesses it exploits. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this attack pattern's id and public links.

Consequences

What a successful attack can lead to
ImpactAffectsNote
Resource ConsumptionAvailabilityDenial of Service
Modify DataIntegrity
Part of
More specific patterns
  • CAPEC-655 Avoid Security Tool Identification by Adding Data

Examples

An adversary could potentially increase file sizes on devices containing limited storage resources, such as S…

An adversary could potentially increase file sizes on devices containing limited storage resources, such as SCADA or IOT devices, resulting in denial of service conditions.

MITRE's words, unchanged: CAPEC-572 at MITRE. CAPEC is Copyright © 2007–2026, The MITRE Corporation, used under the CAPEC terms of use: “The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use Common Attack Pattern Enumeration and Classification (CAPEC™) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE’s copyright designation and this license in any such copy.” CAPEC and the CAPEC logo are trademarks of The MITRE Corporation. Credits. All attack patterns.