debian · CVE-2009-5013

Quick triage

Priority: not yet assigned Published: Updated: Thu, 16 Jul 2026 02:00:17 GMT

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2009-5013 not yet assigned priority: Debian including 1 source packages (python-pyftpdlib), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.

Description:

Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

cvelogic Threat Intelligence