CVE-2019-19272

2019-11-2604:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

CPENameOperatorVersion
proftpdeq1.3.6rc3
proftpdeq1.3.6rc2
proftpdeq1.3.6rc1
proftpdeq1.3.6rc4

Name	Operator	Version
proftpd	eq	1.3.6rc3
proftpd	eq	1.3.6rc2
proftpd	eq	1.3.6rc1
proftpd	eq	1.3.6rc4

References

github.com/proftpd/proftpd/issues/858