CVE-2023-53886: medium-severity vulnerability in Xlightftpd Xlight FTP Server
Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.4%
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Xlightftpd · Xlight FTP ServerRelated CVEs — Xlightftpd Xlight FTP Server
In the same product, most dangerous first.