CVE-2019-19272

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6

published November 26, 2019

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Published
2019-11-26T03:33Z
EPSS history
Timeline
  • 26 NOV 03:33Z
    An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6
    cvelistv5