Get a Quote   (408) 943-4100               TrueNAS Discord      VendOp_Icon_15x15px   Commercial Support

Versions Affected : All versions prior to TrueNAS 12.0-U6


The passive mode in FTP communication allows an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes.

It does not check if the line ends prematurely. If it does, the for-loop condition checks for *p == ‘\0’ one byte too late because p++ was already performed.


No workaround is available.


  • Upgrade to TrueNAS 12.0-U6 or later.


Further information