Inadequate file size control In rdiffweb
Description
rdiffweb allows unlimited length of root directory name, which could result in DoS rdiffweb prior to 2.4.8 has no limit in length of root directory names. Allowing users to enter long strings may result in a DOS attack or memory corruption. Version 2.4.8 defines a field limit for username, email, and root directory.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 2.4.8 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.