CVE-2018-25295
Medium · 6.2CVSS
6.2
EPSS
0.1%
Published
Apr 26, 2026
CISA due date
—
The record
ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62297 ag-psd is a JavaScript library for reading and writing Photoshop Document files. CWE-789
- CVE-2026-62254 LibreDWG is a free C library to read and write DWG files. CWE-789
- CVE-2026-61845 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3… CWE-789
- CVE-2026-115865 Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to… CWE-789
- CVE-2026-119280 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-119278 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-119276 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-789
- CVE-2026-118590 A security vulnerability has been detected in nipy nibabel up to 5.4.2. CWE-789