Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h47c-m3f2-95qp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.

In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.

EPSS

Процентиль: 68%
0.00564
Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.

suse-cvrf
больше 5 лет назад

Security update for uftpd

EPSS

Процентиль: 68%
0.00564
Низкий

7.5 High

CVSS3

Дефекты

CWE-476