CVE-2019-25607 - Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name

Back Back to CVE browser

HIGH

Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name

Published Mar 22, 2026

8.6

HIGH

CVSS 4.0

EPSS 0.15%

Description

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute shellcode with system privileges.

Affected products

Vendor Labf Product Axessh Default
n/a
- Version
  4.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Labf

Axessh

n/a

Version	Status	Constraints
4.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (7)

http://www.labf.com
product
http://www.labf.com/download/axessh.exe
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19955
Advisory
https://www.exploit-db.com/exploits/46858
exploit
https://www.exploit-db.com/exploits/46922
exploit
https://www.exploit-db.com/shellcodes/46281
exploit
https://www.vulncheck.com/advisories/axessh-local-stack-based-buffer-overflow-via-log-file-name
third-party-advisory

Link	Providers	Tags
http://www.labf.com		product
http://www.labf.com/download/axessh.exe		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19955		Advisory
https://www.exploit-db.com/exploits/46858		exploit
https://www.exploit-db.com/exploits/46922		exploit
https://www.exploit-db.com/shellcodes/46281		exploit
https://www.vulncheck.com/advisories/axessh-local-stack-based-buffer-overflow-via-log-file-name		third-party-advisory