Skip to content
OpenAdvisories

Product · hfiref0x

LightFTP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-70637

    LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.c

    LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication. The control thread closes data_socket and file_fd descri…

    hfiref0x LightFTP
  • Medium 5.9
    CVE-2026-67607

    LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

    LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c that allows remote unauthenticated attackers to destabilize or crash the daemon by triggering unsynchro…

    hfiref0x LightFTP