PT-2026-26978
CVE-2019-25590
·
Published
2026-03-22
·
Updated
2026-03-22
Description by
CVSS 3.1
6.2
MediumMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Axessh version 4.2
Description
A denial of service issue exists in the logging configuration. Local attackers can crash the application by providing an excessively long string of 500 or more characters in the log file name parameter. This is triggered when session logging is enabled and a telnet connection is established.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾