Hfiref0x Lightftp
5 CVEs affecting Hfiref0x Lightftp. Latest disclosed: 2026-08-06. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000218 | Critical | 9.8 | 2017-11-17 | LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution. |
CVE-2023-24042 | High | 7.5 | 2023-01-21 | A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten cont… |
CVE-2025-65403 | Medium | 6.5 | 2025-12-01 | A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2026-70637 | Medium | 5.9 | 2026-08-06 | LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST follow… |
CVE-2026-67607 | Medium | 5.9 | 2026-07-31 | LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c tha… |