📄 LightFTP Server 2.4 Race Condition

LightFTP versions through 2.4 current master, commit d28c5e0 contain multiple data race conditions in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. !/usr/bin/env python3 LightFTP Server 2.4 Race...

LightFTP Server 2.3.1 Race Condition

Summary Small x86-32/x64 FTP Server. Description LightFTP 2.3.1 contains a residual race condition an incomplete fix for CVE-2024-11144 in the workerthreadcleanup function of ftpserv.c. The control thread reads and acts on shared per-connection state, including the worker thread id it then passes...