CVE-2021-46854
First published: Wed Nov 23 2022(Updated: )
mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proftpd Proftpd | <1.3.7c |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-46854.
What is the title of this vulnerability?
The title of this vulnerability is "mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters."
How does this vulnerability affect ProFTPD?
This vulnerability affects ProFTPD versions up to and excluding 1.3.7c.
What is the severity of CVE-2021-46854?
The severity of CVE-2021-46854 is high, with a severity value of 7.5.
How can this vulnerability be fixed?
To fix this vulnerability, upgrade to ProFTPD version 1.3.7c or later.
- collector/nvd-index
- vendor/proftpd
- canonical/proftpd proftpd