---
id: 4228
title: "[CVE-2018-10241] SolarWinds Serv-U Managed File Transfer – Denial of Service"
cve: CVE-2018-10241
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/solarwinds-serv-u-dos-advisory"
published_at: "2018-05-11T00:00:00Z"
tags: ["denial-of-service", "solarwinds", "serv-u", "vulnerability-advisory", "cve-2018-10241", "null-pointer-dereference"]
phying_url: "https://phying.com/item/4228"
lang: en
---

# [CVE-2018-10241] SolarWinds Serv-U Managed File Transfer – Denial of Service

## Summary

Denial of service in SolarWinds Serv-U 15.1.6.25: an authenticated user swaps Login.xml for a crafted value to trigger a NULL pointer dereference and crash the server (CVE-2018-10241).

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2018-10241
- **Published:** 2018-05-11T00:00:00Z
- **Original:** https://bishopfox.com/blog/solarwinds-serv-u-dos-advisory
- **Phying News:** https://phying.com/item/4228