Lucene search

K
hackeroneKurohiroH1:1753224
HistoryOct 27, 2022 - 3:19 p.m.

Internet Bug Bounty: CVE-2022-35260: .netrc parser out-of-bounds access

2022-10-2715:19:47
kurohiro
hackerone.com
38
internet bug bounty
cve-2022-35260
.netrc parser
out-of-bounds access
denial-of-service
bugbounty

0.002 Low

EPSS

Percentile

52.1%

Original Report:https://hackerone.com/reports/1721098

Impact

If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.