CVE-2019-25590

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log file name parameter, and trigger a crash when establishing a telnet connection.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-1282

Affected software

No affected versions have been published.

Timeline

Published
Mar 22, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2019

CVE-2019-255916.2DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attacCVE-2019-255926.2PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively lCVE-2019-255935.5jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2019-255946.2ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2019-255956.2jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an eCVE-2019-255966.2SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the applicationCVE-2019-255975.5NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the applCVE-2019-255986.2HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying aCVE-2019-255996.2Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an exCVE-2019-256006.5UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized CVE-2019-256016.2UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to cCVE-2019-256025.5GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively
CVE-2019-25590: Medium severity, CVSS 6.2 | Vulnix