Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25585

Deluge 1.3.15 Denial of Service via Webseeds Field

Description

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dev Deluge

  • 1.3.15affected

References