CVE-2025-65403
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via crafted input.
Risk Assessment
Organizations using the LightFTP server may experience service unavailability due to application crashes. The risk affects systems providing file sharing via FTP.
Recommendation
Update LightFTP to a version containing the fix or implement input validation for the g_cfg.MaxUsers component. Consider restricting access to the FTP server.
Other vulnerabilities in LightFTP
See all- CVE-2017-1000218Critical
LightFTP version 1.1 is vulnerable to a buffer overflow in the 'writelogentry' function resulting in denial of service or remote code execution.
- CVE-2026-70637Medium
LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication. The control thread closes data_socket and file_fd descriptors while worker threads concurrently operate on the same fields in worker_thread_cleanup, allowing stale file descriptors to be reassigned by the OS and subsequently used by worker threads on unrelated resources, resulting in potential denial of service.
- CVE-2026-67607Medium
LightFTP 2.3.1 contains an incomplete fix for CVE-2024-11144, leaving a race condition in the worker_thread_cleanup() function. A remote unauthenticated attacker can send a LIST command followed by ABOR, causing daemon instability or crash (denial of service).
Original NVD description (English source)
A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS