Approved changes feed: RSS · Atom
cpe:2.3:a:labf:axessh:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Labf (7cb1a0be-fb30-5770-a002-ef9a34afffed) |
|---|---|
| Product | Axessh (8f0ba594-7a76-50ff-85a5-3d4e97c2dfd5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25607 |
vulnerable | 2026-06-08 05:13:42.644553 |
Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name
HIGH (8.4)
Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute shellcode with system privileges.
Published: 2026-03-22T13:38:41.830Z
Updated: 2026-03-23T16:16:24.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25590 |
vulnerable | 2026-06-08 05:13:42.616288 |
Axessh 4.2 Denial of Service via Log File Name
MEDIUM (6.2)
Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log file name parameter, and trigger a crash when establishing a telnet connection.
Published: 2026-03-22T13:38:28.762Z
Updated: 2026-03-23T15:31:59.793Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.