CVE-2022-3364

🗓️ 29 Sep 2022 20:45:12Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 70 Views

GitHub repository ikus060/rdiffweb prior to 2.5.0a3, CVE-2022-3364

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2022-3364	30 Sep 202200:35	–	circl
CNNVD	Rdiffweb 安全漏洞	29 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb	29 Sep 202220:45	–	cvelist
Huntr	No limit in length of "Fullname" parameter results in DOS attack /memory corruption	29 Sep 202219:32	–	huntr
EUVD	EUVD-2022-0246	3 Oct 202520:07	–	euvd
Github Security Blog	rdiffweb's unlimited length Fullname field can lead to DoS	30 Sep 202200:00	–	github
NCSC	Vulnerabilities fixed in Microsoft Azure Site Recovery and Azure Storage Library	12 Jul 202200:00	–	ncsc
NVD	CVE-2022-3364	29 Sep 202221:15	–	nvd
OSV	CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb	29 Sep 202220:45	–	osv
OSV	GHSA-FQFG-C577-2VC3 rdiffweb's unlimited length Fullname field can lead to DoS	30 Sep 202200:00	–	osv

NVD

Node

ikus-soft rdiffwebRange≤2.4.9

ikus-soft rdiffwebMatch2.5.0alpha1

ikus-soft rdiffwebMatch2.5.0alpha2

[
  {
    "product": "ikus060/rdiffweb",
    "vendor": "ikus060",
    "versions": [
      {
        "lessThan": "2.5.0a3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/ikus060/rdiffweb/commit/b62c479ff6979563c7c23e7182942bc4f460a2c7
huntr	www.huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720

21 Nov 2024 07:19Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5

CVSS 35.3

EPSS0.00334

SSVC

CWE-770