VULNERABILITY INTELLIGENCE

CVE-2019-25585

CVSS score6.2 MEDIUM

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-03-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.

Weakness classification

disclosure@vulncheck.com: CWE-1260

Primary references

disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Third Party Advisory