CVE-2025-14242 — Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing
A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated…
Published: 2026-01-14 · CVSS: 6.5 · CVSS 3.1
A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7