Описание
Security update for vsftpd
This update for vsftpd fixes the following issue:
- CVE-2025-14242: denial of service via integer overflow in
lscommand parameter parsing (bsc#1256700).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
vsftpd-3.0.5-60.1
Ссылки
- Link for SUSE-SU-2026:5156-1
- E-Mail link for SUSE-SU-2026:5156-1
- SUSE Security Ratings
- SUSE Bug 1256700
- SUSE CVE CVE-2025-14242 page
Описание
A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vsftpd-3.0.5-60.1
Ссылки
- CVE-2025-14242
- SUSE Bug 1256700