Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rrwp-p45h-xvj8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

EPSS

Процентиль: 61%
0.00947
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

CVSS3: 7.5
nvd
почти 7 лет назад

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

CVSS3: 7.5
debian
почти 7 лет назад

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Dir ...

CVSS3: 7.5
fstec
почти 7 лет назад

Уязвимость FTP-сервера ProFTPD, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 10
altlinux
больше 7 лет назад

ALT-PU-2019-2329: package `proftpd` update to version 1.3.6-alt0.1.ga73dbfe3b

EPSS

Процентиль: 61%
0.00947
Низкий