PUBLISHED
2025-03-20 19:15
MODIFIED
2025-03-20 19:15
EPSS (Prob. Exploit)
0.58%
Top 52.1%
> DESCRIPTION
Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service (DOS) condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restore_preferences form. This leads to excessive memory consumption and potential system instability, which can be exploited to disrupt Redlib instances. This vulnerability is fixed in 0.36.0.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> GITHUB SECURITY ADVISORY
GHSA-g8vq-v3mg-7mrg
HIGH
Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form
AFFECTED PACKAGES:
RUST / redlib
< 0.36.0
Fixed in: 0.36.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form
AFFECTED PACKAGES:
Unknown / Unknown
122 versions affected
ALIASES:
GHSA-g8vq-v3mg-7mrg
> HISTORIQUE DES MODIFICATIONS
Première apparition
20/03/2025 19:15
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 15:01
CVEPROJECT
Champ modifié: CVE Project
Total des modifications: 1
Dernière mise à jour: 1 year ago