Vulnerabilidades do Labf Axessh
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Labf Axessh: 2 registro(s), com versões afetadas e correções.
CVE-2019-25607
Alta · 8.4
CWE-787 22/03/2026
Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name
Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute shellcode with system privileges.
CVE-2019-25590
Média · 6.2
CWE-1282 22/03/2026
Axessh 4.2 Denial of Service via Log File Name
Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log file name parameter, and trigger a crash when establishing a telnet connection.