Back
CVE-2018-12113
CRITICAL
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response.
Published: Jul 5, 2018
Modified: Jun 17, 2026
CWE-119
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| coreftp | core_ftp | 2.2 |
GitHub Security Advisory GHSA-hhrx-6q69-8752
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in...
References (6)
- http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa Exploit, Third Party Advisory
- https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa Exploit, Third Party Advisory
- https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9 Exploit, Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
6.95%
Top 6% most likely to be exploited
Threat Score
41.3 / 100
Data Sources
NVD
EPSS
GitHub