cyfenced.com →

[ CVE-2025-14242 · Published 14 Jan 2026 ]

Vulnerability in Red Hat Enterprise Linux 10

CVSS 6.5 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Interim mitigation published by PrivacySafe

[ Description ]Official description

A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence.

[ Fixes ]Fixes and patches

  • vsftpd FTPS data channel hijackInterim mitigation · PrivacySafe · Check, mitigation, optional hardening and rollback for vsftpd 3.0.5 and older with FTPS enabled on a standalone listener, GNU/Linux

[ References ]References