CVE-2024-57392

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-06 · updated 2026-06-17
Weakness: CWE-120

Description

Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port.

References

https://github.com/Br1m4zz/protocol_vul_repoduce.git
https://lists.debian.org/debian-lts-announce/2025/03/msg00003.html

Get alerted when CVE-2024-57392 or the next vulnerability affects your stack