Skip to content
OpenAdvisories
Low · 2.8 CVE-2020-15101 EUVD-2020-0082GHSA-7pmh-vrww-25xxPYSEC-2020-233

Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs

Published Jul 14, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1.

Affected products

VendorProductAffectedFixed
schokokeksorg freewvs < 0.1.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI freewvs < 0.1.1 0.1.1 GHSA-7pmh-vrww-25xx

References