CVE-2023-22551

HIGH

FTP < 2012-03-28 - Denial of Service via Memory Consumption

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-22551. PoCs published by viswagb.

AI-analyzed exploit summary The repository contains only a minimal README with no exploit code, technical details, or functional proof-of-concept. It is a placeholder with no substantive content.

Description

The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to cause a denial of service (memory consumption) by engaging in client activity, such as establishing and then terminating a connection. This occurs because malloc is used but free is not.

Exploits (1)

nomisec STUB
by viswagb · poc
https://github.com/viswagb/CVE-2023-22551

The repository contains only a minimal README with no exploit code, technical details, or functional proof-of-concept. It is a placeholder with no substantive content.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory
https://github.com/rovinbhandari/FTP/issues/8

Scores

CVSS v3 7.5
EPSS 0.0151
EPSS Percentile 71.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

Status published
Products (1)
ftp_project/ftp < 2012-03-28
Published Jan 01, 2023
Tracked Since Feb 18, 2026