CVE-2018-25227
Valentina Studio 9.0.4 Denial of Service via Host Parameter
CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
2th
Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host parameter during server connection attempts.
| CWE | CWE-466 |
| Vendor | valentina-db |
| Product | valentina studio |
| Published | Mar 30, 2026 |
| Last Updated | Mar 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for valentina-db valentina studio
Be the first to know when new medium vulnerabilities affecting valentina-db valentina studio are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Valentina-Db / Valentina Studio
9.0.4
References
exploit-db.com: https://www.exploit-db.com/exploits/46421 valentina-db.com: https://valentina-db.com/en/ valentina-db.com: https://valentina-db.com/en/developer/database/download-valentina-database-adk vulncheck.com: https://www.vulncheck.com/advisories/valentina-studio-denial-of-service-via-host-parameter
Credits
Victor Mondragón