Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2019-18217

Published: 21/10/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 447
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Proftpd

Vulnerability Summary

ProFTPD prior to 1.3.6b and 1.3.7rc prior to 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

proftpd proftpd 1.3.6

proftpd proftpd 1.3.7

proftpd proftpd

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2019-18217
Debian Bug report logs - #942831 CVE-2019-18217 Package: src:proftpd-dfsg; Maintainer for src:proftpd-dfsg is ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-listsdebiannet>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 22 Oct 2019 08:09:09 UTC Severity: grave Tags: security Fixed in versi ...
Debian Security Advisories: DSA-4559-1 proftpd-dfsg -- security update
Stephan Zeisberg discovered that missing input validation in ProFTPD, a FTP/SFTP/FTPS server, could result in denial of service via an infinite loop For the oldstable distribution (stretch), this problem has been fixed in version 135b-4+deb9u2 For the stable distribution (buster), this problem has been fixed in version 136-4+deb10u2 We recom ...

References

CWE-835https://github.com/proftpd/proftpd/issues/846https://github.com/proftpd/proftpd/blob/master/NEWShttps://github.com/proftpd/proftpd/blob/1.3.6/NEWShttps://github.com/proftpd/proftpd/blob/master/RELEASE_NOTEShttps://github.com/proftpd/proftpd/blob/1.3.6/RELEASE_NOTEShttps://lists.debian.org/debian-lts-announce/2019/10/msg00036.htmlhttps://seclists.org/bugtraq/2019/Nov/7https://www.debian.org/security/2019/dsa-4559http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdfhttps://security.gentoo.org/glsa/202003-35https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJDQRVZTILBX4BUCTIRKP2WBHDHDCJR5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLRPYEEMQJVAXO2SXRGOQ4HBFEEPCNXG/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RB2FPAWDWXT5ALAFIC5Y3RSEMXSFL6H2/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942831https://nvd.nist.govhttps://www.debian.org/security/2019/dsa-4559
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook