Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-40524 →
DEBIAN-CVE-2021-40524
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. (Versions 1.0.23 through 1.0.49 are affected.)
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
pure-ftpd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.50-1"}]}]
Debian:13
pure-ftpd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.50-1"}]}]
Références
- advisory security-tracker.debian.org