CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel

published February 20, 2020

CVSS
—
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12142 · 96.2th percentile
Published
2020-02-20T15:22Z
EPSS history
Timeline
  • 20 FEB 15:22Z
    In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel
    cvelistv5