Search for vulnerabilities
Vulnerability details: VCID-v8gd-hhrg-gqfr
Vulnerability ID VCID-v8gd-hhrg-gqfr
Aliases CVE-2023-51713
Summary make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
epss 0.00399 https://api.first.org/data/v1/epss?cve=CVE-2023-51713
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-51713
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-51713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51713
https://github.com/proftpd/proftpd/blob/1.3.8/NEWS
https://github.com/proftpd/proftpd/issues/1683
https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554
cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
CVE-2023-51713 https://nvd.nist.gov/vuln/detail/CVE-2023-51713
USN-7297-1 https://usn.ubuntu.com/7297-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-51713
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.59867
EPSS Score 0.00399
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:49:22.824603+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/7297-1/ 37.0.0