PatchTheCVEminiftpd vulnerabilities and fixes
Recent CVEs affecting miniftpd, with upgrade or downgrade steps. 3 tracked.
miniftpd has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-11-04. Highest priority: CVE-2021-40239 (score 62/100).
- CVE-2021-42624 HIGH 7.8 MITIGATE A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp v
- CVE-2021-40239 CRITICAL 9.8 DOWNGRADE A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c
- CVE-2021-39602 MEDIUM 6.5 DOWNGRADE A Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the do_mkd function in the ftpproto.c file, which cou
FAQ
How do I fix miniftpd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is miniftpd being exploited right now?
None of the tracked miniftpd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which miniftpd CVE should I patch first?
CVE-2021-40239 currently ranks highest (62/100): A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c.