CVE-2021-47821CWE-1284

RarmaRadio 2.72.8 - Denial of Service

Medium · published January 16, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

⚠️ RarmaRadio 2.72.8 has a denial of service vulnerability that could turn your listening party into a crashing bore! An attacker can overflow configuration fields with massive character buffers, causing instability. 🔥 Think of it like trying to cram a gigantic order into a restaurant's reservation system — if you input too many people, the whole system can freeze up and nobody gets a table! An attacker could send RarmaRadio into a tailspin by flooding it with oversized inputs, potentially crashing the application and interrupting your favorite tunes. This means unexpected downtime and frustration for users, losing all that sweet, sweet radio goodness!

Put simply

Think of it like trying to cram a gigantic order into a restaurant's reservation system — if you input too many people, the whole system can freeze up and nobody gets a table! This vulnerability allows attackers to overflow network configuration fields with up to 100,000 characters, leading to application instability and possible crashes. It's a classic case of input validation gone wrong!

What to do

An attacker could send RarmaRadio into a tailspin by flooding it with oversized inputs, potentially crashing the application and interrupting your favorite tunes. This means unexpected downtime and frustration for users, losing all that sweet, sweet radio goodness! To protect against this, update RarmaRadio to the latest version as soon as possible. Additionally, implement input validation measures to limit the size of configuration fields and avoid overwhelming the application. Stay vigilant! You've got this! Follow these steps, and you'll keep your RarmaRadio rocking smoothly! 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00407 · 33.9th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-01-16T19:09Z
EPSS history
Timeline
  • 16 JAN 19:09Z
    RarmaRadio 2.72.8 - Denial of Service
    cvelistv5