CVE-2020-14149
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a...
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
- Record
CVE-2020-14149- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
- Record
CVE-2020-14149- Updated
- 2026-11-02
EUVDEUVD-2020-6306 No score
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
- Record
EUVD-2020-6306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h47c-m3f2-95qp
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a...
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
- Record
GHSA-h47c-m3f2-95qp- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
- Record
CVE-2020-14149- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0865-1 No score
Security update for uftpd
This update for uftpd fixes the following issues:
uftpd was updated to version 2.12.
Changes:
- Use common log message format and log level when user enters an invalid path. This unfortunately affects changes introduced in v2.11 to increase logging at default log level.
Security fixes:
- CVE-2020-14149: When entering an invalid directory with the FTP command CWD, a NULL ptr was deref. in a DBG() message even though the log level is set to a value lower than LOG_DEBUG. This caused uftpd to crash and cause denial of service. Depending on the init/inetd system used this could be permanent. (boo#1172959)
- Record
openSUSE-SU-2020:0865-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
uftpdopenSUSE:Leap 15.1 |
before 2.12-lp151.2.6.1 | 2.12-lp151.2.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14149 is a high vulnerability (CVSS 7.5) in Troglobit Uftpd, published June 15, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in uftpd 2.12-lp151.2.6.1.
References
github.com/troglobit/uftpd/issues/30
bugs.gentoo.org/726308
lists.opensuse.org/opensuse-security-announce/2020-06/msg00052.html
nvd.nist.gov/vuln/detail/CVE-2020-14149
bugzilla.suse.com/1172959
suse.com/security/cve/CVE-2020-14149