Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/08 8:51 p.m.8 views

Colord: Slow rejection of oversized malformed color strings

Impact colord's CSS color string matchers described a number as +-?\d.?\d+. In that form \d and \d+ can match the same digits, so a run of n digits can be divided between them in On² ways, and rejecting an input retries every division. Parsing is synchronous and uninterruptible, so a long...

6.9CVSS0.00291EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder