Improper input validation in pyftpdlib
Moderate severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Oct 19, 2010
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Jun 9, 2022
Last updated
Jan 29, 2023
The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.
References