Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43910
HistoryOct 20, 2023 - 5:50 a.m.

Denial Of Service (DoS)

2023-10-2005:50:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
torbot
denial of service
vulnerability
http request
malicious link
cpu resources
server
exploit

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%

torbot is vulnerable to Denial of Service (DoS). An attacker is able to cause a denial-of-service (DoS) conditions on a vulnerable system by exploiting a regular expression that has exponential complexity by tricking a user into opening a malicious link or by sending a specially crafted HTTP request to the vulnerable Torbot server. Once the vulnerability is exploited, the attacker could cause the Torbot server to consume excessive CPU resources, which would prevent legitimate users from accessing the server.

CPENameOperatorVersion
torbotle3.1.2
torbotle3.1.2

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%