Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-3439
HistoryOct 14, 2022 - 12:00 a.m.

CVE-2022-3439 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

2022-10-1400:00:00
CWE-770
@huntrdev
www.cve.org
3
cve-2022-3439
github repository
resource allocation
security vulnerability

CVSS3

4.5

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

59.6%

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CNA Affected

[
  {
    "vendor": "ikus060",
    "product": "ikus060/rdiffweb",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.5.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.5

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

59.6%

Related for CVELIST:CVE-2022-3439