CVE-2025-65637
HIGHlogrus < 1.8.3 - Denial of Service via Large Single-Line Payload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-65637. PoCs published by adminlove520, mjuanxd.
AI-analyzed exploit summary This repository contains functional proof-of-concept code demonstrating a denial-of-service vulnerability in `github.com/sirupsen/logrus` versions < 1.8.3, 1.9.0, and 1.9.2. The vulnerability occurs when `logrus.Writer()` processes a single-line payload larger than 64KB without newlines, causing the writer to fail and become unusable.
Description
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
Exploits (2)
This repository contains functional proof-of-concept code demonstrating a denial-of-service vulnerability in `github.com/sirupsen/logrus` versions < 1.8.3, 1.9.0, and 1.9.2. The vulnerability occurs when `logrus.Writer()` processes a single-line payload larger than 64KB without newlines, causing the writer to fail and become unusable.
This repository contains a working proof-of-concept for CVE-2025-65637, a denial-of-service vulnerability in logrus where writing a single-line payload larger than 64KB without newlines causes the Writer() to fail and become unusable.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H