Debian/pure-ftpd: high 7.5
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occur
Action: Upgrade pure-ftpd to 1.0.50-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.50-1 | - |
Fixed versions
| 1.0.50-1 |
Sources
- osv: DEBIAN-CVE-2021-40524#Debian:13/pure-ftpd
- https://security-tracker.debian.org/tracker/CVE-2021-40524
published · modified · JSON