CVE-2017-16892

High

Published: 19/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Bftpd before version 4.7, there is a memory leak in the file rename function.

Risk Assessment

The memory leak may lead to increased resource consumption, potentially affecting server stability in the long run.

Recommendation

It is recommended to update Bftpd to version 4.7 or later to mitigate this vulnerability.

Other vulnerabilities in Bftpd

CVE-2025-11947Medium
A weakness was identified in bftpd up to 6.2 in the expand_groups function of options.c (configuration file handler). Manipulation can lead to a heap-based buffer overflow; the attack requires local access, is highly complex, and a public exploit exists.

Original NVD description (English source)

In Bftpd before 4.7, there is a memory leak in the file rename function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS