CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2019-12-31

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Fedora (Fedoraproject)
• Pure-ftpd (Pureftpd)

References

• https://github.com/jedisct1/pure-ftpd/commit/aea56f4bcb9948d456f3fae4d044fd3fa2e19706
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AHZG5FPCRMCB6Z3L7FPICC…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PICL3U2J4EPGBLOE555Y5R…