Lucene search
HistorySep 29, 2022 - 9:15 p.m.
CVE-2022-3364
cve-2022-3364
allocation of resources
github
ikus060/rdiffweb
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.1%
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
Affected configurations
Node
ikus-softrdiffwebRange≤2.4.9
ORikus-softrdiffwebMatch2.5.0alpha1
ORikus-softrdiffwebMatch2.5.0alpha2
| CPE | Name | Operator | Version |
|---|---|---|---|
| ikus-soft:rdiffweb | ikus-soft rdiffweb | le | 2.4.9 |
| ikus-soft:rdiffweb | ikus-soft rdiffweb | eq | 2.5.0 |
CNA Affected
[
{
"product": "ikus060/rdiffweb",
"vendor": "ikus060",
"versions": [
{
"lessThan": "2.5.0a3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
osv
osv
PYSEC-2022-298
2022-09-29 21:15:00
CVE-2022-3364
2022-09-29 21:15:11
rdiffweb's unlimited length Fullname field can lead to DoS
2022-09-30 00:00:20
cvelist
cvelist
nvd
nvd
CVE-2022-3364
2022-09-29 21:15:11
huntr
huntr
prion
prion
Design/Logic Flaw
2022-09-29 21:15:00
github
github
rdiffweb's unlimited length Fullname field can lead to DoS
2022-09-30 00:00:20
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.1%
Related for CVE-2022-3364