A flaw was found in basic-ftp. A malicious or compromised FTP server can cause a Denial of Service (DoS) by returning specially crafted Unix directory listings to the client. Inefficient regular expression processing during directory parsing leads to excessive CPU consumption, blocking the application event loop and causing the process to become unresponsive.
Last checked: 2026-09-30 21:40 UTC
Proof of concept · CISA Coordinator (Assessed 2026-09-30 20:05 UTC)
Fix evidence last checked: 2026-10-06 09:58 UTC