---
id: CVE-2019-25712
title: BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key
summary: >-
  BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the
  registration key field that allows local attackers to crash the application by
  submitting an oversized key value. Attackers can trigger a denial of service
  by entering a…
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-787
vendor: NSauditor
product: BlueAuditor
affected:
  - BlueAuditor 1.7.2.0
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-04-13T15:50:08.440808Z'
exploitAvailable: true
published: '2026-04-12'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T00:54:10.726Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2019-25712'
references:
  - url: 'https://www.exploit-db.com/exploits/46087'
    label: ExploitDB-46087
  - url: >-
      https://www.vulncheck.com/advisories/blueauditor-buffer-overflow-denial-of-service-via-registration-key
    label: >-
      VulnCheck Advisory: BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service
      via Registration Key
tags:
  - cve.org
  - exploit-available
epss: 0.00201
epssPercentile: 0.09885
ingestedAt: '2026-10-27T16:11:59.194Z'
---

## Overview

BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.

## Affected

- `BlueAuditor 1.7.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.