Troglobit

6 CVEs across 5 Troglobit products. Browse Troglobit vulnerabilities, severities, and proof-of-concept exploits.

Troglobit products with known CVEs

ProductCVEs
Uftpd5
Finit2
Libeuv1
Pimd1
Redir1
Troglobit CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-37182High7.52026-02-11Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. A…
CVE-2025-32022Medium4.62025-05-06Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts…
CVE-2025-29906High8.62025-04-29Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the `tty` configuration…
CVE-2022-48620Critical9.82024-01-12uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.
CVE-2020-20277Critical9.82020-12-18There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper imple…
CVE-2020-20276Critical9.82020-12-18An unauthenticated stack-based buffer overflow vulnerability in common.c's handle_PORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a c…
CVE-2020-14149High7.52020-06-15In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrate…
CVE-2020-5221Medium6.52020-01-22In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and wri…
CVE-2020-5204Medium6.52020-01-06In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sp…
CVE-2011-00072011-01-11pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal…