CVE-2022-50799

Fetch FTP Client 5.8.2 contains a denial of service vulnerability that allows attackers to trigger 100% CPU consumption by sending long server responses. Attackers can send specially crafted FTP server responses exceeding 2K bytes to cause excessive resource utilization and potentially crash the application.

CVSS v4.0

7.1 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.41% chance of exploitation in the next 30 days, 34th percentile

Published

2025-12-30

Updated

2026-01-02

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/50696

References

• CVE Record
• NVD entry

Related

• CVE-2022-50797
• CVE-2022-50800
• CVE-2022-50796
• CVE-2022-50801
• CVE-2022-50795
• CVE-2022-50802