CVE-2022-21689CWE-400

Denial of Service in Onionshare

High · published January 18, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions the receive mode limits concurrent uploads to 100 per second and blocks other uploads in the same second, which can be triggered by a simple script. An adversary with access to the receive mode can block file upload for others. There is no way to block this attack in public mode due to the anonymity properties of the tor network.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-01-18T22:10Z
EPSS history
Timeline
  • 18 JAN 22:10Z
    Denial of Service in Onionshare
    cvelistv5