CVE-2011-0762: canonical ubuntu_linux Uncontrolled Resource Consumption
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2011-0762 is a medium (CVSS 4.0) Uncontrolled Resource Consumption vulnerability in canonical ubuntu_linux. EPSS estimates a 73.95% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 02-03-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
73.95%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 73.95% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (securityreason.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (securityreason.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- vsftpd< 2.3.2-3+squeeze2 | < 2.0.7-1+lenny1 | < 2.3.4-1
- debian_linuxEOL5.0 | 6.0 | 7.0
Redhat2 products
- vsftpd< 0:2.0.1-9.el4 | < 0:2.0.5-16.el5_6.1 | < 0:2.2.2-6.el6_0.1
- vsftpd-debuginfo< 0:2.0.1-9.el4 | < 0:2.0.5-16.el5_6.1 | < 0:2.2.2-6.el6_0.1
Canonical1 product
- ubuntu_linuxEOL6.06 | 8.04 | 9.10 | 10.04 | 10.10
Fedoraproject1 product
- fedoraEOL13 | 14 | 15
Opensuse1 product
- opensuseEOL11.2 | 11.3 | 11.4
Suse1 product
- linux_enterprise_server9 | 10:sp3 | 10:sp4 | 11:sp1
Vsftpd_project1 product
- vsftpd< 2.3.3
7 vendors · 9 products
References
32 links- lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- marc.info?l=bugtraq&m=133226187115472&w=2Vendor AdvisoryX Refsource HPIssue TrackingThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741X Refsource CONFIRMIssue TrackingThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.securityfocus.com/archive/1/516748/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
Show all 32 references
- www.mandriva.com/security/advisories?name=MDVSA-2011:049Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.redhat.com/support/errata/RHSA-2011-0337.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory