Lucene search
+L

3 matches found

CVE
CVE
•added 2022/09/30 1:15 p.m.•93 views

CVE-2022-3371

CVE-2022-3371 affects rdiffweb prior to 2.5.0a3. The vulnerability stems from unbounded Token name length, allowing Allocation of Resources Without Limits or Throttling, leading to DoS or memory corruption. The issue is fixed in version 2.5.0a3. If upgrading is not possible, a temporary mitigatio...

7.5CVSS7.3AI score0.01343EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/09/30 1:15 p.m.•38 views

CVE-2022-3371 No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS7.8AI score0.01343EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/09/30 1:15 p.m.•10 views

CVE-2022-3371 No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS7.6AI score0.01343EPSS
SaveExploits1References2
Rows per page
Query Builder