Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-47895

Nsauditor 3.2.2.0 - 'Event Description' Denial of Service

Description

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsauditor Nsauditor

  • 3.2.2.0affected

References