CVE-2020-6835: Bftpd Project Bftpd

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking.

Affected products

• Bftpd Project Bftpd: before 5.4 (fixed in 5.4)

Published 2020-01-10. Last modified 2026-06-17.