CVE-2020-5204CWE-121

Buffer overflow vulnerability in uftpd

Medium · published January 6, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len('255.255.255.255') == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01079 · 64.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-01-06T19:10Z
EPSS history
Timeline
  • 06 JAN 19:10Z
    Buffer overflow vulnerability in uftpd
    cvelistv5