CVE-2025-65403 - A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input

MEDIUM

A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input

Published Dec 1, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.33%

A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-200022		Advisory
https://github.com/hfiref0x/LightFTP		Product
https://shimo.im/docs/9030JMJpv4IM4Nkw		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 1, 2025

Updated Dec 1, 2025

Reserved Nov 18, 2025

CISA Vulnrichment

Updated Dec 1, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 1, 2025

Updated Dec 1, 2025

GitHub

No data