~ / search / GHSA-477v-w82m-634j

GHSA-477v-w82m-634j

Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages

Source: GitHub Advisory Database (reviewed) High CVE-2022-25891

Packages

EcosystemPackageAffectedFixed in
Go github.com/containrrr/shoutrrr < 0.6.0 0.6.0

Details

As written in the advisory (Markdown source, shown as plain text).

The package `github.com/containrrr/shoutrrr/pkg/util` before 0.6.0 are vulnerable to Denial of Service (DoS) via the `util.PartitionMessage` function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages.

References

External links from the advisory. They lead to third-party sites.