CVE-2019-25590
Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log file name parameter, and trigger a crash when establishing a telnet connection.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.17%
- CWE
- CWE-1282
- Published
- 2026-03-22
- Last modified
- 2026-03-23
Affected products
- Labf Axessh
Weakness type
Related vulnerabilities
- CVE-2018-25229 — BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
- CVE-2019-25588 — BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address
- CVE-2019-25587 — BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service
- CVE-2019-25583 — RarmaRadio 2.72.3 Username Field Denial of Service
- CVE-2019-25551 — Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow
- CVE-2019-25358 — FileOptimizer 14.00.2524 - Denial of Service
- CVE-2022-2483