{"id":"CVE-2023-51713","aliases":["DEBIAN-CVE-2023-51713","DLA-3975-1","EUVD-2023-56410","GHSA-6959-h9pv-vhf9","OESA-2024-1075","UBUNTU-CVE-2023-51713","USN-7297-1","openSUSE-SU-2024:0008-1","openSUSE-SU-2024:13554-1"],"status":"published","title":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon...","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.04249,"percentile":0.91181,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-12-22T00:00:00Z","modified":"2026-11-02T02:46:08Z","exploits":[{"source":"nuclei","id":"CVE-2023-51713","title":"ProFTPD \u003c 1.3.8a - DoS via Out-of-Bounds Read","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-51713.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"proftpd-dfsg","fixed_in":["1.3.8+dfsg-4+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"proftpd-dfsg","fixed_in":["1.3.8.a+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"proftpd-dfsg","fixed_in":["1.3.8.a+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"proftpd","fixed_in":["1.3.8b-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"proftpd","fixed_in":["1.3.8b-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"proftpd","fixed_in":["1.3.8b-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"proftpd","fixed_in":["1.3.8b-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"proftpd","fixed_in":["1.3.8b-4.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"proftpd","fixed_in":["1.3.8b-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"proftpd-dfsg","fixed_in":["1.3.6c-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"proftpd-dfsg","fixed_in":["1.3.7c+dfsg-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"proftpd","fixed_in":["1.3.8b-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8+dfsg-4+deb12u3"}]}],"versions":["1.3.8+dfsg-4","1.3.8+dfsg-4+deb12u1","1.3.8+dfsg-4+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8.a+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8.a+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7a+dfsg-12+deb11u3"}]}],"versions":["1.3.7a+dfsg-12","1.3.7a+dfsg-12+deb11u1","1.3.7a+dfsg-12+deb11u2"],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-4.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.5-2","1.3.5a-1","1.3.5a-1build1","1.3.5a-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.5d-1","1.3.5e-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6c-2ubuntu0.1"}]}],"versions":["1.3.6-6build2","1.3.6c-1","1.3.6c-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7c+dfsg-1ubuntu0.1"}]}],"versions":["1.3.7b+dfsg-1","1.3.7c+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6c-2ubuntu0.1"}]}],"versions":["1.3.6-6build2","1.3.6c-1","1.3.6c-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7c+dfsg-1ubuntu0.1"}]}],"versions":["1.3.7b+dfsg-1","1.3.7c+dfsg-1build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8.b+dfsg-1ubuntu0.1"}]}],"versions":["1.3.8+dfsg-8","1.3.8.a+dfsg-1","1.3.8.b+dfsg-1","1.3.8.b+dfsg-1build1","1.3.8.b+dfsg-1build2","1.3.8.b+dfsg-1build3"],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-bp155.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-bp155.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8b-2.1"}]}]}],"products":[{"vendor":"proftpd","product":"proftpd"}],"references":[{"url":"https://github.com/proftpd/proftpd/issues/1683","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report"]},{"url":"https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report"]},{"url":"https://github.com/proftpd/proftpd/blob/1.3.8/NEWS","tags":["x_transferred","Release Notes","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51713","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6959-h9pv-vhf9"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51713.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-51713","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1075","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-51713","tags":["report"]},{"url":"https://github.com/proftpd/proftpd/commit/1376d8ccc0966d1ce9a1c76b32c6a9ca61bbe67f","tags":["report"]},{"url":"https://github.com/proftpd/proftpd/commit/97bbe68363ccf2de0c07f67170ec64a8b4d62592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51713","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7297-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-48795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-48651","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L45IOOVVBSIBE7RRRVUWOWDGUABBZE4Q/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218144","tags":["report"]},{"url":"https://bugzilla.suse.com/1218344","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51713","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-51713","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2025-11-03T21:50:17.839Z","updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-56410","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2025-11-03T21:50:17Z","updated_at":"2026-11-02T19:49:30.775561Z"}],"ghsa":[{"id":"GHSA-6959-h9pv-vhf9","title":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon...","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T03:30:33Z","modified":"2025-11-04T00:31:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:04:29.580531Z"}],"nvd":[{"id":"CVE-2023-51713","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T03:15:09.73Z","modified":"2026-06-17T06:41:31.31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:57.117371Z"}],"osv":[{"id":"DEBIAN-CVE-2023-51713","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T03:15:09.73Z","modified":"2026-10-26T18:01:56.30050696Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2024-1075","title":"proftpd security update","description":"ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple \u0026apos;virtual\u0026apos; FTP servers, anonymous FTP, and permission-based directory visibility. %if 1 This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included. %else This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by xinetd instead are included. %endif\r\n\r\nSecurity Fix(es):\r\n\r\nmake_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.(CVE-2023-51713)","status":"published","published":"2024-01-19T11:06:31Z","modified":"2026-08-18T01:18:13.369879386Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2023-51713","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T03:15:00Z","modified":"2026-04-22T14:16:42.662334Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CVE-2023-51713","description":"make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2026-11-10T02:30:45.8789357Z","updated_at":"2026-11-09T10:53:57.550641Z"},{"id":"DLA-3975-1","title":"proftpd-dfsg - security update","status":"published","published":"2024-11-29T00:00:00Z","modified":"2026-03-09T01:18:13.2429Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:0008-1","title":"Security update for proftpd","description":"This update for proftpd fixes the following issues:\n\nproftpd was updated to 1.3.8b - released 19-Dec-2023\n\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (boo#1218144)\n- CVE-2023-51713: Fixed Out-of-bounds buffer read when handling FTP commands. (boo#1218344)\n","status":"published","published":"2024-01-03T20:12:53Z","modified":"2026-02-04T02:34:47.790645Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13554-1","title":"proftpd-1.3.8b-2.1 on GA media","description":"These are all security issues fixed in the proftpd-1.3.8b-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:50:10.065867Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"USN-7297-1","title":"ProFTPD vulnerabilities","description":"Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the\ntransport protocol implementation in ProFTPD had weak integrity checks.\nAn attacker could use this vulnerability to bypass security features\nlike encryption and integrity checks. (CVE-2023-48795)\n\nMartin Mirchev discovered that ProFTPD did not properly validate user\ninput over the network. An attacker could use this vulnerability to\ncrash ProFTPD or execute arbitrary code. (CVE-2023-51713)\n\nBrian Ristuccia discovered that ProFTPD incorrectly inherited groups\nfrom the parent process. An attacker could use this vulnerability to\nelevate privileges. (CVE-2024-48651)\n","status":"published","published":"2025-02-25T15:13:53Z","modified":"2026-04-27T18:02:26.829725894Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}