CVE-2025-30160

Katalog CVE

CVSS 7.5 · High EPSS 0,58%

Kerentanan Uncontrolled Resource Consumption pada redlib. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service (DOS) condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restore_preferences form. This leads to excessive memory consumption and potential system instability, which can be exploited to disrupt Redlib instances. This vulnerability is fixed in 0.36.0.

Rincian

Terbit di NVD

20 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 46,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/redlib-org/redlib/security/advisories/GHSA-g8vq-v3mg-7mrg patch · advisory vendor
• https://github.com/redlib-org/redlib/commit/15147cea8e42f6569a11603d661d71122f6a02dc patch
• https://github.com/redlib-org/redlib/commit/2e95e1fc6e2064ccfae87964b4860bda55eddb9a patch