Medium USN-3731-1 1 CVE

lftp vulnerability

Published Aug 6, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LFTP incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	lftp	4.4.13-1ubuntu0.1
Ubuntu · 16.04 LTS 16.04:LTS	lftp	4.6.3a-1ubuntu0.1
Ubuntu · 18.04 LTS 18.04:LTS	lftp	4.8.1-1ubuntu0.1

Vulnerabilities 1

Medium 5.3

CVE-2018-10916

It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leadin…

[UNKNOWN] lftp lftp lftp Debian Ubuntu Alpine

Aug 1, 2018

References

report
https://ubuntu.com/security/CVE-2018-10916