CVEvulnerability

CVE-2004-2259

5.0 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.

Affected configurations

• beasts vsftpd 1.2.0 • beasts vsftpd 1.2.1

Related

Referenced by CWE · observed example (4)

  • CWE-364 Signal Handler Race Condition weakness
  • CWE-479 Signal Handler Use of a Non-reentrant Function weakness
  • CWE-663 Use of a Non-reentrant Function in a Concurrent Context weakness
  • CWE-828 Signal Handler with Functionality that is not Asynchronous-Safe weakness

References