CVE-2021-47865
No fix known EPSS <1%CVSS 7.5
ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access.
Products: ProFTPD
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 18.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 20.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 22.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 24.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 25.10 | proftpd-dfsg | no fix |
| Ubuntu 26.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 26.10 | proftpd-dfsg | no fix |