CVE-2021-30047

VSFTPD is vulnerable to a denial of service, caused by only a limited number of connections allowed, a remote attacker could exploit this vulnerability to cause a denial of service condition.

vsftpd has a configurable limit to the number of concurrent clients which can be accepted, max_clients. Obviously if this number is exceeded then service is denied to other clients. It is normal practice is to use e.g. firewall rules to limit denial of service attacks.

As such, Red Hat does not consider this to be a real vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.