CVE-2022-3298

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8...

CVE-2022-3298

creationtimestamp| type| source ---|---|--- 2022-09-27 02:22:54+00:00| seen| https://t.me/cibsecurity/50526 2025-05-21 15:42:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17132...

CVE-2022-3298 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8...

CVE-2022-3298

CVE-2022-3298 refers to a resource allocation vulnerability in the rdiffweb project by ikus060, where prior to version 2.4.8 an unlimited-length title field (used when adding an SSH key) can cause excessive memory usage and lead to a Denial of Service. Multiple sources corroborate the issue, with...