CVE-2023-2990

Fortra Globalscape Administration Server Denial of Service

State: Published
Severity: Not scored
Published: Jun 22, 2023
Updated: Dec 4, 2024
Reserved: May 30, 2023

Description

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service

Scores

The record has no CVSS score.

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
Globalscape EFTFortra	8.0.0 to before 8.1.0.16Affected

References

https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/
https://kb.globalscape.com/Knowledgebase/11588/Is-EFT-susceptible-to-the-Denial-of-service-via-recursive-Deflate-Stream-vulnerability

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.