Asif Akbar

**Name of the Vulnerable Software and Affected Versions** ELOG Electronic Logbook version 3.1.4-283534d **Description** This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer, allowing an attacker to create a denial-of-service condition. **Recommendations** For ELOG Electronic Logbook version 3.1.4-283534d, at the moment, there is no information about a newer version that contains a fix for this issue.