VDB
BDU%3A2019-04710
BDU%3A2019-04710
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента main.c FTP-сервера ProFTPD, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, Novell Inc., The ProFTPD Project, Siemens AG, АО «ИВК» | Debian GNU/Linux, Fedora, OpenSUSE Leap, ProFTPD, SIMATIC CP 1543-1, Альт 8 СП (запись в едином реестре российских программ №4305) |
Timeline
- Dec 17, 2019 CVE Published
- Sep 16, 2024 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://www.debian.org/security/2019/dsa-4559 url
- https://github.com/proftpd/proftpd/issues/846 url
- https://github.com/proftpd/proftpd/blob/1.3.6/NEWS url
- https://github.com/proftpd/proftpd/blob/1.3.6/RELEASE_NOTES url
- https://github.com/proftpd/proftpd/blob/master/NEWS url
- https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES url
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html url
- https://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdf url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJDQRVZTILBX4BUCTIRKP2WBHDHDCJR5/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RB2FPAWDWXT5ALAFIC5Y3RSEMXSFL6H2/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YLRPYEEMQJVAXO2SXRGOQ4HBFEEPCNXG/ url
- https://lists.debian.org/debian-lts-announce/2019/10/msg00036.html url
- https://altsp.su/obnovleniya-bezopasnosti/ url