CVE-2021-41168

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

CVE-2021-41168

creationtimestamp| type| source ---|---|--- 2021-10-22 00:37:18+00:00| published-proof-of-concept| https://t.me/cibsecurity/30987...

CVE-2021-41168 Hash-Collision Denial-of-Service Vulnerability in snudown

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudown was found to be vulnerable to denial of service attacks to its reference table implementation. References written in markdown referencename:...

CVE-2021-41168

Summary. Snudown (reddit‑specific fork of Sundown) contains a vulnerability in the reference table hash implementation. The reference hashes use a weak hash function, enabling an attacker to generate many hash collisions, leading to a hash‑collision DoS attack and long retrieval times due to dupl...