CVE-2018-25427
Arm Whois 3.11 contains a flaw that allows an attacker to run unauthorized commands on a system. This happens when the software receives an input that is too large in the IP address or domain fields.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users running Arm Whois version 3.11.
Real-world impact
A remote attacker could take control of the application and execute malicious code on the target machine by sending specially crafted, oversized data.
Why this severity
This vulnerability is rated as critical because it allows a remote attacker to execute arbitrary code without needing special privileges or user interaction.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jun 1, 2026 · Jun 1, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 13d agoAdvisory updatedThe NVD record was last revised.