In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
{
"binaries": [
{
"binary_version": "1.0.36-3.2+deb8u1build0.16.04.1",
"binary_name": "pure-ftpd"
},
{
"binary_version": "1.0.36-3.2+deb8u1build0.16.04.1",
"binary_name": "pure-ftpd-common"
},
{
"binary_version": "1.0.36-3.2+deb8u1build0.16.04.1",
"binary_name": "pure-ftpd-ldap"
},
{
"binary_version": "1.0.36-3.2+deb8u1build0.16.04.1",
"binary_name": "pure-ftpd-mysql"
},
{
"binary_version": "1.0.36-3.2+deb8u1build0.16.04.1",
"binary_name": "pure-ftpd-postgresql"
}
]
}
{
"binaries": [
{
"binary_version": "1.0.46-1ubuntu18.04.1",
"binary_name": "pure-ftpd"
},
{
"binary_version": "1.0.46-1ubuntu18.04.1",
"binary_name": "pure-ftpd-common"
},
{
"binary_version": "1.0.46-1ubuntu18.04.1",
"binary_name": "pure-ftpd-ldap"
},
{
"binary_version": "1.0.46-1ubuntu18.04.1",
"binary_name": "pure-ftpd-mysql"
},
{
"binary_version": "1.0.46-1ubuntu18.04.1",
"binary_name": "pure-ftpd-postgresql"
}
]
}