Headline
GHSA-3fhq-72hw-jqwv: rdiffweb's lack of token name length limit can result in DoS or memory corruption
rdiffweb prior to 2.5.0a3 is vulnerable to Allocation of Resources Without Limits or Throttling. A lack of limit in the length of the Token name parameter can result in denial of service or memory corruption. Version 2.5.0a3 fixes this issue.
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2022-3371
rdiffweb’s lack of token name length limit can result in DoS or memory corruption
High severity GitHub Reviewed Published Oct 1, 2022 • Updated Oct 3, 2022
Package
pip rdiffweb (pip)
Affected versions
< 2.5.0a3
Description
Related news
CVE-2022-3371
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.