Red Hat Security Advisory

RHSA-2026:4477

vsftpd security update

Released 2026-03-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) vsftpd-3.0.3-33.el8_4.1
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) vsftpd-3.0.3-33.el8_4.1

Fixes 1 record

TI-2025-13016 CVE-2025-14242 · GHSA-6v4g-392h-r9mh

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

LOW 30

A flaw was found in vsftpd.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00807 Published 2026-01-14 Partial fix · 3.0.5-10.el10_1.1, 3.0.5-9.el10_0.1 +10 CWE-190