What is CVE-2018-25427?

CVE-2018-25427 is a critical-severity vulnerability in Armcode Arm Whois, classified under Stack-based Buffer Overflow. CVSS score: 9.8/10. Published 2026-06-01.

How severe is CVE-2018-25427?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Armcode Arm Whois

CVE-2018-25427

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 by…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (49.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Armcode Arm Whois — versions 3.11

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2018-25427?: CVE-2018-25427 is a critical-severity vulnerability in Armcode Arm Whois, classified under Stack-based Buffer Overflow. CVSS score: 9.8/10. Published 2026-06-01.
How severe is CVE-2018-25427?: Critical severity. CVSS v3 base score is 9.8 out of 10.