Deluge Denial-of-Service Vulnerability via Webseeds Field

A denial-of-service vulnerability has been identified in Deluge version 1.3.15. This issue allows local attackers to crash the application by entering an excessively long string, specifically a 5000-byte buffer, into the Webseeds field while creating a torrent. The application crash is triggered when the buffer exceeds the field's capacity.

Impact

Exploitation of this vulnerability leads to a crash of the Deluge application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, first create a text file containing a 5000-byte buffer. This can be done using a simple Python script that writes the buffer into a text file. After preparing the buffer, open Deluge and select 'File' > 'Create Torrent'. In the 'Webseeds' field, paste the content from the clipboard, which should include the 5000-byte buffer. Once pasted, the application will crash, demonstrating the denial-of-service vulnerability.