CVE-2019-25585: Deluge 1.3.15 Denial of Service via Webseeds Field
Published Mar 22, 2026
·Updated
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.
Affected Software
10 affected components
Deluge Deluge=1.3.15
Deluge-torrent Deluge=1.3.15
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
ubuntu/deluge*
Event History
Mar 22, 2026
CVE Published
via MITRE·12:11 AM
Data Sourced
via MITRE·12:11 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·01:16 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·01:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-25585?
CVE-2019-25585 is classified as a denial of service vulnerability.
2
How do I fix CVE-2019-25585?
To fix CVE-2019-25585, upgrade to a version of Deluge that is not affected, preferably newer than 1.3.15.
3
Who is affected by CVE-2019-25585?
CVE-2019-25585 affects users of Deluge version 1.3.15.
4
What type of attack is associated with CVE-2019-25585?
CVE-2019-25585 is associated with a local denial of service attack.
5
What can an attacker do with CVE-2019-25585?
An attacker can crash the application by supplying an excessively long string in the Webseeds field.