MEDIUM
Deluge 1.3.15 Denial of Service via URL Field
Published Mar 22, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.18%
Description
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash.
Affected products
-
- Version 1.3.15StatusaffectedConstraints-
- Version
- 1.3.15
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://download.deluge-torrent.org/windows/deluge-1.3.15-win32-py2.7.exe product
- https://dev.deluge-torrent.org/ product
- https://www.exploit-db.com/exploits/46883 exploitThird Party AdvisoryVDB Entry
- https://www.vulncheck.com/advisories/deluge-denial-of-service-via-url-field third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://download.deluge-torrent.org/windows/deluge-1.3.15-win32-py2.7.exe | product | |
| https://dev.deluge-torrent.org/ | product | |
| https://www.exploit-db.com/exploits/46883 | exploitThird Party AdvisoryVDB Entry | |
| https://www.vulncheck.com/advisories/deluge-denial-of-service-via-url-field | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Mar 22, 2026
Updated Mar 23, 2026
Reserved Mar 21, 2026
Link CVE-2019-25586
CISA Vulnrichment
Updated Mar 23, 2026