CVE-2018-25234
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Mar 30, 2026
CISA due date
—
The record
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to trigger an application crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2018-25227 Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2019-25599 Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2019-25586 Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to… CWE-466
- CVE-2019-25548 BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local… CWE-466
- CVE-2024-33602 nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache… CWE-466