CVE-2019-25590
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Mar 22, 2026
CISA due date
—
The record
Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log file name parameter, and trigger a crash when establishing a telnet connection.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2018-25229 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP… CWE-1282
- CVE-2019-25588 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS… CWE-1282
- CVE-2019-25587 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the… CWE-1282
- CVE-2019-25583 RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that… CWE-1282
- CVE-2019-25551 Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to… CWE-1282
- CVE-2019-25358 FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers… CWE-1282