PT-2025-49116 · Logrus+2 · Logrus+2
Ozfive
·
Published
2023-02-02
·
Updated
2026-05-22
·
CVE-2025-65637
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
logrus versions prior to 1.8.3
logrus versions 1.9.0
logrus versions 1.9.2
Description
A denial-of-service issue exists in logrus when utilizing
Entry.Writer() to log a single-line payload exceeding 64KB without newline characters. The internal bufio.Scanner encounters a "token too long" error, closing the writer pipe and rendering Writer() unusable, which can lead to application unavailability.Recommendations
Update to logrus version 1.8.3 or later.
Update to logrus version 1.9.1 or later.
Update to logrus version 1.9.3 or later.
Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Rocky Linux
Logrus