1 matches found
Colord: Slow rejection of oversized malformed color strings
Impact colord's CSS color string matchers described a number as +-?\d.?\d+. In that form \d and \d+ can match the same digits, so a run of n digits can be divided between them in On² ways, and rejecting an input retries every division. Parsing is synchronous and uninterruptible, so a long...
6.9CVSS0.00291EPSS
SaveExploits0References5Affected Software1
20