Lucene search
HistoryJun 22, 2023 - 8:15 p.m.
CVE-2023-2990
fortra
globalscape
eft
denial of service
vulnerability
infinite recursion
crash
service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.8%
Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service
Affected configurations
Node
globalscapeeft_serverRange<8.1.0.16
| Vendor | Product | Version | CPE |
|---|---|---|---|
| globalscape | eft_server | * | cpe:2.3:a:globalscape:eft_server:*:*:*:*:*:*:*:* |
Related
prion
prion
Denial of service
2023-06-22 20:15:00
cvelist
cvelist
CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service
2023-06-22 19:17:28
nessus
nessus
GlobalSCAPE EFT Recursive Deflate Stream DoS (CVE-2023-2990)
2023-06-30 00:00:00
cve
cve
CVE-2023-2990
2023-06-22 20:15:09
rapid7blog
rapid7blog
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.8%
Related for NVD:CVE-2023-2990