Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception handler and gain command execution when the application processes the input.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-07 | 1 | Disclosure1 |
| 2026-06-08 | 1 | Patch1 |
CVE-2018-25427: Critical (9.3) stack buffer overflow in Arm Whois 3.11. Remote, no-auth RCE via oversized input to the IP/domain field. Public exploit on Exploit-DB. Patch or ditch it. https://secalerts.co/vulnerability/CVE-2018-25427 https://t.co/cT6lymt8JK
Post summary
The tweet announces a critical CVE with technical details, references a public exploit, and emphasizes the availability of a patch or workaround.
CVE-2018-25427 - Critical stack buffer overflow in Arm Whois 3.11. Remote code execution via oversized IP/domain input. CVSS 9.8. No patch available. Disable or isolate affected systems immediately. #CVE #Arm #infosec #CVEAlert More updates: https://www.valtersit.com/cve/CVE-2018-25427
Post summary
The post announces CVE-2018-25427 as a critical stack buffer overflow that allows remote code execution, notes the absence of a patch, and recommends disabling or isolating affected systems.