CVE-2023-51713: High severity ProFTPD ProFTPD vulnerability
Last updated 26 February 2025
Other sources
makeftpcmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/proftpd-dfsgto a version that resolves this vulnerability.Fixed in 1.3.7a+dfsg-12+deb11u5Fixed in 1.3.8+dfsg-4+deb12u4Fixed in 1.3.8.c+dfsg-2Fixed in 1.3.8.c+dfsg-4 - Upgrade
Upgrade
ProFTPDto a version that resolves this vulnerability.Fixed in 1.3.8a
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51713?
CVE-2023-51713 is classified as a medium severity vulnerability due to its potential to cause a daemon crash.
How do I fix CVE-2023-51713?
To fix CVE-2023-51713, upgrade ProFTPD to version 1.3.8a or later.
What type of vulnerability is CVE-2023-51713?
CVE-2023-51713 is an out-of-bounds read vulnerability that affects the handling of command inputs in ProFTPD.
Which versions of ProFTPD are affected by CVE-2023-51713?
ProFTPD versions prior to 1.3.8a are affected by CVE-2023-51713.
What is the impact of CVE-2023-51713?
CVE-2023-51713 can lead to a crash of the ProFTPD daemon, impacting file transfer services on the server.