vsftpd
vsftpdcounted 2026-10-11 04:20 UTC
As of 2026-10-11, 35 035 hosts ran vsftpd with at least one known CVE on a service open at their latest check, across 27 versions with CVEs; 7 distinct CVEs.
Known CVEs on hosts running it
35 035hosts with known CVEs
7distinct CVEs
27versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 439 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 3.0.3 | 15 790 | 2 |
| 3.0.2 | 11 788 | 2 |
| 2.2.2 | 3 396 | 3 |
| 1.2.2 | 1 553 | 3 |
| 2.3.2 | 812 | 3 |
| 2.0.5 | 756 | 3 |
| 2.3.5 | 290 | 2 |
| 2.3.4 | 158 | 3 |
| 2.0.7 | 134 | 3 |
| 2.1.2 | 128 | 3 |
| 2.0.4 | 59 | 3 |
| 2.0.1 | 34 | 3 |
| 2.0.3 | 32 | 3 |
| 2.1.0 | 23 | 3 |
| 2.0.6 | 12 | 3 |
| 3.0.0 | 11 | 2 |
| 2.3.0 | 10 | 3 |
| 1.2.0 | 8 | 4 |
| 1.2.1 | 7 | 4 |
| 1.1.3 | 7 | 4 |
| 2.0.8 or later | 6 | 3 |
| 1.1.0 | 6 | 3 |
| 1.0.1 | 5 | 3 |
| 2.4.6 | 4 | 2 |
| 2.2.0 | 3 | 3 |
| 3.0.3.1 | 2 | 1 |
| 2.2.1 | 1 | 3 |
3 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2021-3618 HIGH 7.4 | 35 035 |
| CVE-2015-1419 MEDIUM 5.0 | 19 243 |
| CVE-2021-30047 HIGH 7.5 | 15 790 |
| CVE-2011-0762 MEDIUM 4.0 | 6 992 |
| CVE-2011-2523 CRITICAL 9.8 | 158 |
| CVE-2004-2259 MEDIUM 5.0 | 15 |
| CVE-2004-0042 MEDIUM 5.0 | 7 |
Hosts: matches on services open at each host's latest check, over every version.