Vulnetix
Try Vulnetix Request Demo
CVE-2025-59350 PUBLISHED CVSS 2.700000047683716 LOW

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison instruction’s execution times. This vulnerability is fixed in 2.1.0.

EPSS 0.07% · 20.2th percentile

Risk Scores

CVSS v4.0
2.700000047683716
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS Score
0.07%
20.2th percentile

Affected Products

VendorProductVersions
github.comdragonflyoss/dragonfly0
linuxfoundationdragonfly0
dragonflyossdragonfly< 2.1.0
d7y.iodragonfly/v20

Timeline

References

Open in Interactive Console →