CVE-2020-9365
Fixed in a distro release EPSS 7%
An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.
Products: pureftpd pure-ftpd, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pure-ftpd | 1.0.49-3 |
| Debian 13 | pure-ftpd | 1.0.49-3 |
| Ubuntu 16.04 LTS | pure-ftpd | no fix |
| Ubuntu 18.04 LTS | pure-ftpd | no fix |
| openSUSE Tumbleweed | pure-ftpd | 1.0.50-1.1 |