AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attac…

AMPPS 2.7 contains a denial of service vulnerability (CVE-2018-25169) that allows remote attackers to crash the service by sending malformed data to the default HTTP port. Attackers can establish multiple socket connections and transmit invalid payloads to exhaust server resources. This results in service unavailability and system crashes. The vulnerability affects the AMPPS web server stack and can be exploited remotely without authentication. Multiple proof-of-concept exploits are available demonstrating the attack vector.