CVE-2019-19270

2019-11-2604:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

69.0%

JSON

An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server.

OSVersionArchitecturePackageVersionFilename
Debian12allproftpd-dfsg< 1.3.6b-2proftpd-dfsg_1.3.6b-2_all.deb
Debian11allproftpd-dfsg< 1.3.6b-2proftpd-dfsg_1.3.6b-2_all.deb
Debian10allproftpd-dfsg< 1.3.6-4+deb10u3proftpd-dfsg_1.3.6-4+deb10u3_all.deb
Debian999allproftpd-dfsg< 1.3.6b-2proftpd-dfsg_1.3.6b-2_all.deb
Debian13allproftpd-dfsg< 1.3.6b-2proftpd-dfsg_1.3.6b-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	proftpd-dfsg	< 1.3.6b-2	proftpd-dfsg_1.3.6b-2_all.deb
Debian	11	all	proftpd-dfsg	< 1.3.6b-2	proftpd-dfsg_1.3.6b-2_all.deb
Debian	10	all	proftpd-dfsg	< 1.3.6-4+deb10u3	proftpd-dfsg_1.3.6-4+deb10u3_all.deb
Debian	999	all	proftpd-dfsg	< 1.3.6b-2	proftpd-dfsg_1.3.6b-2_all.deb
Debian	13	all	proftpd-dfsg	< 1.3.6b-2	proftpd-dfsg_1.3.6b-2_all.deb

0.003 Low

EPSS

Percentile

69.0%

JSON

Related for DEBIANCVE:CVE-2019-19270