CVE-2021-47865

HIGH

ProFTPD 1.3.7a - Remote Denial of Service

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47865 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.

Description

ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 22, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

ProFTPD

Browse ProFTPD / ProFTPD

Default status: unaffected

CVE List1.3.7aaffected

Proofs of concept

1

Catalogued exploits

ExploitDBProFTPD 1.3.7a - Remote Denial of ServiceExploitDB exploitby xynmapsNot analyzed1 file
ExploitDB
PoC details

References

6