Bug 2419826 (CVE-2025-14242)
| Summary: | CVE-2025-14242 vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Patrick Del Bello <pdelbell> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | abhraj, carnil, security-response-team, tkorbar |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Deadline: | 2026-01-14 | ||
|
Description
Patrick Del Bello
2025-12-08 03:44:03 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:0606 https://access.redhat.com/errata/RHSA-2026:0606 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:0608 https://access.redhat.com/errata/RHSA-2026:0608 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:0605 https://access.redhat.com/errata/RHSA-2026:0605 Hi, So is this correct that this CVE is specific for vsftpd in Red Hat due to an additional patch to support square brackets in ls command? Only reference with CVE I found is related to this change: https://src.fedoraproject.org/rpms/vsftpd/c/2ed5ba6e77f1c3e365fb4b0028945f762c456131 Thank you in advance, Regards, Salvatore Hi, yes that is correct. The vulnerability was located in the patch adding square bracket support. Regards. This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Via RHSA-2026:4470 https://access.redhat.com/errata/RHSA-2026:4470 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Via RHSA-2026:4477 https://access.redhat.com/errata/RHSA-2026:4477 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:4513 https://access.redhat.com/errata/RHSA-2026:4513 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:4522 https://access.redhat.com/errata/RHSA-2026:4522 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Extended Update Support Via RHSA-2026:4525 https://access.redhat.com/errata/RHSA-2026:4525 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Via RHSA-2026:4543 https://access.redhat.com/errata/RHSA-2026:4543 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Enterprise Linux 8.6 Telecommunications Update Service Via RHSA-2026:4550 https://access.redhat.com/errata/RHSA-2026:4550 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:4553 https://access.redhat.com/errata/RHSA-2026:4553 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:4554 https://access.redhat.com/errata/RHSA-2026:4554 |