Skip to content
SUSE vsftpd Update Addresses Integer Overflow DoS Vulnerability

SUSE vsftpd Update Addresses Integer Overflow DoS Vulnerability

First seen 10 Nov 2026, 22:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 22:20 UTC
  • •CVE-2025-14242 affects vsftpd versions in multiple SUSE distributions.
  • •The vulnerability allows denial of service through integer overflow in command parsing.
  • •Patches are available and should be applied immediately to prevent potential service disruptions.

On November 10, 2026, SUSE released updates for vsftpd to address CVE-2025-14242, an integer overflow vulnerability that can lead to denial of service via improper parsing of the `ls` command parameter. The vulnerability affects multiple SUSE Linux distributions, including openSUSE Leap 15.6 and SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security. The CVSS score for this vulnerability is 6.5, categorized as medium severity. Administrators are advised to apply the patches using SUSE's recommended installation methods. The updates are crucial for maintaining server stability and security, as exploitation could disrupt service availability. The vulnerability was published on January 14, 2026, and is now patched, with no reports of in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-01-14
CVE-2025-14242 published
SUSE disclosed an integer overflow vulnerability in vsftpd affecting multiple distributions.
Linuxsecurity
2026-11-10
Patch released for vsftpd
SUSE released updates for vsftpd to fix the integer overflow vulnerability, advising users to apply patches immediately.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track OpenSUSE and CVE-2025-14242 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which versions of vsftpd are affected?
The vulnerability affects vsftpd versions in openSUSE Leap 15.6 and SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security.
Is there evidence of active exploitation?
No, there are currently no reports of active exploitation for CVE-2025-14242.
How should I apply the patches?
Use SUSE's recommended installation methods like YaST online_update or 'zypper patch' to apply the updates.