Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25586. PoCs published by Victor Mondragón.
AI-analyzed exploit summary This PoC exploits a denial-of-service vulnerability in Deluge 1.3.15 by crafting a maliciously long URL string (5000 'A' characters) that crashes the application when pasted into the 'Add Torrent from URL' field. The exploit leverages a buffer overflow or improper input validation in the URL parsing logic.
Description
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash.
Exploits (1)
This PoC exploits a denial-of-service vulnerability in Deluge 1.3.15 by crafting a maliciously long URL string (5000 'A' characters) that crashes the application when pasted into the 'Add Torrent from URL' field. The exploit leverages a buffer overflow or improper input validation in the URL parsing logic.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H