Vulnerability · Published Feb 20, 2020 · Assigned by mitre
CVE-2020-9273
High 8.8
In plain English
A high-severity security flaw in the proftpd-dfsg package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 11.8% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)11.8%top 3.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | proftpd-dfsg | 1.3.6c-2 | DEBIAN-CVE-2020-9273 |
| Debian:13 | proftpd-dfsg | 1.3.6c-2 | DEBIAN-CVE-2020-9273 |
| Debian:14 | proftpd-dfsg | 1.3.6c-2 | DEBIAN-CVE-2020-9273 |
Affected products (as reported)
References
- https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES x_refsource_CONFIRM
- https://github.com/proftpd/proftpd/issues/903 x_refsource_CONFIRM
- [debian-lts-announce] 20200221 [SECURITY] [DLA 2115-1] proftpd-dfsg security update mailing-list, x_refsource_MLIST
- DSA-4635 vendor-advisory, x_refsource_DEBIAN
- FEDORA-2020-76c707cff0 vendor-advisory, x_refsource_FEDORA
- FEDORA-2020-876b1f664e vendor-advisory, x_refsource_FEDORA
- openSUSE-SU-2020:0273 vendor-advisory, x_refsource_SUSE
- [debian-lts-announce] 20200302 [SECURITY] [DLA 2115-2] proftpd-dfsg regression update mailing-list, x_refsource_MLIST
- GLSA-202003-35 vendor-advisory, x_refsource_GENTOO
- https://cert-portal.siemens.com/productcert/pdf/ssa-679335.pdf x_refsource_CONFIRM
- [oss-security] 20210824 Possible memory leak on getspnam / getspnam_r mailing-list, x_refsource_MLIST
- [oss-security] 20210906 Re: Possible memory leak on getspnam / getspnam_r mailing-list, x_refsource_MLIST