CVE-2024-48208

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

CVSS v3.1

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

EPSS

1.57% chance of exploitation in the next 30 days, 74th percentile

Nuclei

high · CWE-125

Published

2024-10-24

Updated

2024-10-28

Proof-of-concept exploits (2)

• jedisct1/pure-ftpd/pull/176
• rohilchaudhry/CVE-2024-482087★ · 2024-11-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48208.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-55182
• CVE-2025-65945
• CVE-2024-48202
• CVE-2024-48218
• CVE-2024-4820
• CVE-2024-48222