CVE-2018-25234

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Return of Pointer Value Outside of Expected Range pada smartftp. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to trigger an application crash.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-466: Return of Pointer Value Outside of Expected Range

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/smartftp-client-denial-of-service-via-host-field advisory pihak ketiga
• https://www.exploit-db.com/exploits/45759 exploit · vdb entry
• https://www.smartftp.com/en-us/ product
• https://www.smartftp.com/en-us/download product