CVE-2022-25891

Denial of Service (DoS)

High · published July 15, 2022

CVSS v3.1
7.5
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.01645 · 76.3th percentile
Published
2022-07-15T20:01Z
EPSS history
Timeline
  • 15 JUL 20:01Z
    Denial of Service (DoS)
    cvelistv5