CVE-2019-18217

nvd nist nuclei

Published: Oct 21, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.

Affected (8)

Products: Proftpd: Proftpd

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Proftpd Proftpd	Up to 1.3.5
Proftpd Proftpd	Version 1.3.6
Proftpd Proftpd	Version 1.3.6 a
Proftpd Proftpd	Version 1.3.6 rc1
Proftpd Proftpd	Version 1.3.6 rc2
Proftpd Proftpd	Version 1.3.6 rc3
Proftpd Proftpd	Version 1.3.6 rc4
Proftpd Proftpd	Version 1.3.7 rc1

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html

Source: cve@mitre.org

https://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdf

Source: cve@mitre.org

https://github.com/proftpd/proftpd/blob/1.3.6/NEWS

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/1.3.6/RELEASE_NOTES

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/master/NEWS

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/issues/846

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/10/msg00036.html

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJDQRVZTILBX4BUCTIRKP2WBHDHDCJR5/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RB2FPAWDWXT5ALAFIC5Y3RSEMXSFL6H2/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLRPYEEMQJVAXO2SXRGOQ4HBFEEPCNXG/

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Nov/7

Source: cve@mitre.org

https://security.gentoo.org/glsa/202003-35

Source: cve@mitre.org

https://www.debian.org/security/2019/dsa-4559

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/proftpd/proftpd/blob/1.3.6/NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/1.3.6/RELEASE_NOTES

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/master/NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/proftpd/proftpd/issues/846

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/10/msg00036.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJDQRVZTILBX4BUCTIRKP2WBHDHDCJR5/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RB2FPAWDWXT5ALAFIC5Y3RSEMXSFL6H2/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLRPYEEMQJVAXO2SXRGOQ4HBFEEPCNXG/

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Nov/7

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202003-35

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2019/dsa-4559

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.