4 matches found
logrus-dos-poc
CVE-2025-65637: Logrus 서비스 거부 취약점 이 디렉토리는 github.com/sirupsen/logrus의 서비스 거부DoS 취약점에 대한 개념 증명 코드와 테스트 스크립트를 포함하며, CVE-2025-65637 로 할당되었습니다. 취약점 요약 CVE ID : CVE-2025-65637 CWE : CWE-400 통제되지 않은 리소스 소비 CVSS : 7.5 High 발견자 : Christopher Straight, Juan Pablo Mandelbaum 설명 Entry.Writer를 사용하여 개행 문자가 없는...
ROS-20260907-73-0088
The vulnerability of the Entry.Writer function in the Logrus logging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102702)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102702 advisory. A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline...
CVE-2025-65637: Uncontrolled Resource Consumption
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...