FTP Service Vulnerability in LightFTP Affected by Anomalous Data

CVE-2024-11144

What is CVE-2024-11144?

CVE-2024-11144 is a critical security vulnerability in the LightFTP Server that results from a lack of thread safety. This vulnerability can be exploited by an anonymous user sending anomalous data over a remote network, leading to a denial of service. When the FTP service crashes, it affects all users relying on it for file transfers, potentially resulting in incomplete, corrupt file transfers and impacting overall system stability, particularly if resource leaks occur or other services are disrupted. Users of LightFTP are strongly advised to implement immediate security measures to mitigate the risk associated with this vulnerability.

References