Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2021-30047

CWE-400 — Uncontrolled Resource Consumption5 documents5 sources
Severity
7.5HIGH
EPSS
31.3%
top 3.23%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Vsftpd Project Vsftpd
Timeline
PublishedAug 22

Description

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2021-30047: VSFTPD 3↗2023-08-22
▶
GHSA
GHSA-p8mp-mm84-7pqr: VSFTPD 3↗2023-08-22
▶

💥Exploits & PoCs

1
Nuclei
vsftpd < 3.0.3 - DoS
▶

📋Vendor Advisories

1
Red Hat
vsftpd: denial of service due to limited number of connections allowed↗2023-08-22
▶
CVE-2021-30047 (HIGH CVSS 7.5) | VSFTPD 3.0.3 allows attackers to ca | cvebase.io