Headline
GHSA-5v95-j4rr-6f3c: rdiffweb's unlimited username field length can lead to DoS
rdiffweb prior to 2.4.8 is vulnerable to a potential Dos attack via an unlimited length “username” field. This can result in excess memory consumption, or memory corruption, leading to a Denial of Service (DoS). This issue is patched in version 2.4.8. There are no known workarounds.
rdiffweb’s unlimited username field length can lead to DoS
High severity GitHub Reviewed Published Sep 27, 2022 • Updated Sep 30, 2022
Related news
CVE-2022-3290
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.