Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25295

ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field

Description

ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

P10 ObserverIP Scan Tool

  • 1.4.0.1affected

References