CVE-2015-5917: Buffer Overflow
The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the {..,..,..}/ substring.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5917?
CVE-2015-5917 has a high severity rating due to its ability to cause denial of service by consuming memory and causing daemon outages.
How does CVE-2015-5917 exploit system vulnerabilities?
CVE-2015-5917 exploits vulnerabilities in the glob implementation by sending a crafted STAT command that includes problematic patterns.
Which systems are affected by CVE-2015-5917?
CVE-2015-5917 affects versions of tnftpd used in Apple OS X prior to 10.11 and specific implementations on NetBSD.
How do I mitigate CVE-2015-5917?
To mitigate CVE-2015-5917, it is recommended to update to the latest version of tnftpd and apply any relevant security patches.
Is there a way to detect if CVE-2015-5917 is being exploited?
To detect potential exploitation of CVE-2015-5917, monitor logs for unusual STAT command patterns and high memory usage in the tnftpd service.