Lucene search

PRIOn knowledge basePRION:CVE-2023-51713

HistoryDec 22, 2023 - 3:15 a.m.

Out-of-bounds

2023-12-2203:15:00

PRIOn knowledge base

www.prio-n.com

proftpd

out-of-bounds read

daemon crash

make_ftp_cmd

mishandling

quote semantics

backslash semantics

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.3%

JSON

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

CPENameOperatorVersion
proftpdeq< 1.3.8a

CPE	Name	Operator	Version
	proftpd	eq	< 1.3.8a

References

github.com/proftpd/proftpd/blob/1.3.8/NEWS

github.com/proftpd/proftpd/issues/1683