Arm Whois 3.11 contains a buffer overflow that can be triggered by a local attacker providing an overly long input string. When an attacker inputs a 700‑byte buffer into the IP address or domain field, the application copies the data into a fixed‑size buffer without bounds checking, causing a crash. The result is a denial of service condition that terminates the program and can require a restart. The weakness is a classic stack based buffer overflow (CWE‑120).

The affected product is Arm Whois version 3.11, distributed by Armcode. Only this specific version is mentioned in the advisory, and no other versions are referenced as vulnerable.

The CVSS score of 6.9 indicates a moderate severity. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not been publicly exploited to a significant extent. The attack vector is local, meaning an attacker must have the ability to run the program on a machine where the software is installed. Once the buffer overflow is triggered, the application crashes, denying service to legitimate users. Overall, the risk is moderate but could be higher in environments where Arm Whois is a critical service and local access can be easily obtained.