Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Leafnode资源耗竭远程拒绝服务攻击漏洞
Vulnerability Description
leafnode是一款Usnet新闻的存储转发代理，使用网络新闻传输协议。 leafnode在处理特殊新闻张贴时存在问题，远程攻击者可以利用这个漏洞使leafnode消耗所有CPU资源而导致拒绝服务。 攻击者可以通过交叉地把新闻张贴到多个新闻组中，而某几个新闻组的前缀是其他新闻组名，可导致leafnode在通过message-id来获得新闻文章时，进入无限循环，消耗所有CPU资源，使服务程序停止对正常服务的响应。
CVSS Information
N/A
Vulnerability Type
N/A