CVE-2023-22551: FTP Project FTP

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to cause a denial of service (memory consumption) by engaging in client activity, such as establishing and then terminating a connection. This occurs because malloc is used but free is not.

Affected products

• FTP Project FTP: up to and including 2012-03-28

Published 2023-01-01. Last modified 2026-06-17.