Описание
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 1.3.8.b+dfsg-1 |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | released | 1.3.6c-2ubuntu0.1 |
| esm-apps/jammy | released | 1.3.7c+dfsg-1ubuntu0.1 |
| esm-apps/noble | not-affected | 1.3.8.b+dfsg-1 |
| esm-apps/resolute | not-affected | 1.3.8.b+dfsg-1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| focal | released | 1.3.6c-2ubuntu0.1 |
Показывать по
7.5 High
CVSS3
Связанные уязвимости
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of- ...
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
Уязвимость функции make_ftp_cmd компонента main.c FTP-сервера ProFTPD, позволяющая нарушителю вызвать отказ в обслуживании
7.5 High
CVSS3