CVE-2024-48208
Published: 24 October 2024
Summary
CVE-2024-48208 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Pureftpd Pure-Ftpd. Its CVSS base score is 8.6 (High).
Operationally, ranked in the top 2.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
Pure-ftpd versions prior to 1.0.52 contain an out-of-bounds read vulnerability in the domlsd() function within ls.c, classified as a buffer overflow under CWE-125. The flaw affects the FTP server's directory listing handling and carries a CVSS 3.1 score of 8.6, reflecting network attack vector, low complexity, and no required privileges or user interaction.
An unauthenticated remote attacker can send crafted FTP commands to trigger the out-of-bounds read, resulting in limited disclosure and modification of data alongside a high impact on availability through potential crashes or service disruption.
The referenced GitHub pull request #176 addresses the issue in the 1.0.52 release. The EPSS score has reached a peak of 0.4366 with a current value of 0.3857, indicating sustained moderate exploitation interest following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-42955
Vulnerability details
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.