CVE-2018-25368
BaseFortify
Publication date: 2026-05-25
Last updated on: 2026-05-25
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nordvpn | nord_vpn | 6.14.31 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-789 | The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Nord VPN version 6.14.31 and is a denial of service issue. It allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field. Specifically, an attacker can paste a buffer of repeated characters into the password input field, which triggers the application to crash when it attempts to authenticate.
How can this vulnerability impact me? :
The impact of this vulnerability is a denial of service condition. An attacker can cause the Nord VPN application to crash by submitting a specially crafted long password string, potentially disrupting your ability to use the VPN service until the application is restarted or fixed.