A denial-of-service vulnerability in the Go library Logrus can cause application unavailability when processing large, single-line log entries.

The vulnerability exists in the Entry.Writer() function, which fails to handle payloads larger than 64KB due to internal bufio.Scanner limitations. An unauthenticated attacker can trigger this state by submitting a large, single-line log payload, causing the writer pipe to close and rendering the logging component unusable.

Successful exploitation results in a denial-of-service condition for applications relying on the Logrus library for logging. Given the CVSS score of 7.5, this high-severity flaw can lead to significant operational disruption, as logging is a critical component for monitoring, debugging, and security auditing. If an application crashes or loses its ability to record events due to this failure, the organization may face extended downtime and reduced visibility during security incidents.

Immediate Action: Update the Logrus dependency to version 1.8.3, 1.9.1, or 1.9.3 or later to ensure proper chunking of log inputs.

Proactive Monitoring: Monitor application logs for unexpected termination of logging services or errors related to token length limits in the bufio scanner.

Compensating Controls: Implement input validation at the application level to truncate or reject excessively large, single-line log inputs before they are passed to the Logrus writer.

Public Exploit Available: Yes, a public proof-of-concept repository exists at github.com/mjuanxd/logrus-dos-poc.

This vulnerability presents a clear risk to service availability for any application using the affected versions of the Logrus library. Development teams must prioritize upgrading their dependencies to the patched versions immediately. Failure to address this flaw leaves the application susceptible to trivial remote denial-of-service attacks that can bypass standard security controls.