CVE-2019-25712

Katalog CVE

CVSS 5.5 · Medium EPSS 0,20%

Kerentanan Out-of-bounds Write pada nsasoft blueauditor. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.

Rincian

Terbit di NVD

12 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/blueauditor-buffer-overflow-denial-of-service-via-registration-key advisory pihak ketiga
• https://www.exploit-db.com/exploits/46087 exploit · vdb entry