bftpd project vulnerabilities

Products

• bftpd 3

Latest bftpd project CVEs

Newest publication first

1. CVE-2020-6835 An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking.

   Published 2020-01-10

   Critical·CVSS 9.8 EPSS 2.0%

   An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking.

2. CVE-2020-6162 An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroups_init function in di...

   Published 2020-01-10

   Critical·CVSS 9.1 EPSS 1.7%

   An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroups_init function in dirlist.c.

3. CVE-2017-16892 In Bftpd before 4.7, there is a memory leak in the file rename function.

   Published 2017-11-19

   High·CVSS 7.5 EPSS 1.2%

   In Bftpd before 4.7, there is a memory leak in the file rename function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.