CVE-2019-19272

2019-11-2603:33:41

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

References

github.com/proftpd/proftpd/issues/858