Unrated
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. Thi...
CVE-2021-40491
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-40491 inetutils Fixed in: 2:2.2-1
Original description The description as published by the source.
References
- advisory bugs.debian.org
- advisory lists.debian.org
- advisory lists.gnu.org
- patch git.savannah.gnu.org