Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-3364 EUVD-2022-0246GHSA-fqfg-c577-2vc3PYSEC-2022-298

No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Published Sep 29, 2022 · Updated May 20, 2025 · Assigned by @huntrdev

Vendor: ikus060 Product: ikus060/rdiffweb Package: rdiffweb Ecosystem: PyPI

Description

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

Affected products

VendorProductAffectedFixed
ikus060 ikus060/rdiffweb unspecified – < 2.5.0a3 2.5.0a3

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI rdiffweb < 2.5.0a3 2.5.0a3 GHSA-fqfg-c577-2vc3
PyPI rdiffweb < 2.4.10 2.4.10 PYSEC-2022-298

References