Vulnerability Details CVE-2019-19272
An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-19272
-
cpe:2.3:a:proftpd:proftpd:1.2.0
-
cpe:2.3:a:proftpd:proftpd:1.2.1
-
cpe:2.3:a:proftpd:proftpd:1.2.10
-
cpe:2.3:a:proftpd:proftpd:1.2.2
-
cpe:2.3:a:proftpd:proftpd:1.2.3
-
cpe:2.3:a:proftpd:proftpd:1.2.4
-
cpe:2.3:a:proftpd:proftpd:1.2.5
-
cpe:2.3:a:proftpd:proftpd:1.2.6
-
cpe:2.3:a:proftpd:proftpd:1.2.7
-
cpe:2.3:a:proftpd:proftpd:1.2.8
-
cpe:2.3:a:proftpd:proftpd:1.2.9
-
cpe:2.3:a:proftpd:proftpd:1.3.0
-
cpe:2.3:a:proftpd:proftpd:1.3.1
-
cpe:2.3:a:proftpd:proftpd:1.3.2
-
cpe:2.3:a:proftpd:proftpd:1.3.3
-
cpe:2.3:a:proftpd:proftpd:1.3.4
-
cpe:2.3:a:proftpd:proftpd:1.3.5
-
cpe:2.3:a:proftpd:proftpd:1.3.5a
-
cpe:2.3:a:proftpd:proftpd:1.3.5b
-
cpe:2.3:a:proftpd:proftpd:1.3.5c
-
cpe:2.3:a:proftpd:proftpd:1.3.5d
-
cpe:2.3:a:proftpd:proftpd:1.3.5e