CVE-2020-9272
Fixed in a distro release EPSS 2%
ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.
Products: proftpd, siemens simatic_net_cp_1543-1_firmware, siemens simatic_net_cp_1545-1_firmware, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | proftpd-dfsg | 1.3.6c-1 |
| Debian 13 | proftpd-dfsg | 1.3.6c-1 |
| Debian 14 | proftpd-dfsg | 1.3.6c-1 |
| SUSE Package Hub 15 | proftpd | 1.3.6c-bp151.4.9.1 |
| SUSE Package Hub 15 SP1 | proftpd | 1.3.6c-bp151.4.9.1 |
| openSUSE Leap 15.1 | proftpd | 1.3.6c-bp151.4.9.1 |
| openSUSE Tumbleweed | proftpd | 1.3.6e-1.10 |