CVE-2015-5917

The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory…

published October 9, 2015

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the {..,..,..}/* substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02730 · 86.0th percentile
Published
2015-10-09T01:00Z
EPSS history
Timeline
  • 09 OCT 01:00Z
    The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory…
    cvelistv5