An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called, they fail to correctly detect the end of the linked list and try to access a non-existent list member. This is related to init_aliases in diraliases.c.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
21 Nov 2024, 05:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/jedisct1/pure-ftpd/commit/8d0d42542e2cb7a56d645fbe4d0ef436e38bcefa - Patch, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2020/02/msg00029.html - Mailing List, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5NSUDWXZVWUCL6R2PTX3KBB42Z62CA5/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5DBVHJCXWRSJPNJQCJQCKZF6ZDPZCKA/ - | |
| References | () https://security.gentoo.org/glsa/202003-54 - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4515-1/ - Third Party Advisory | |
| References | () https://www.pureftpd.org/project/pure-ftpd/news/ - Vendor Advisory |
07 Nov 2023, 03:26
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2020-02-26 16:15
Updated : 2024-11-21 05:40
NVD link : CVE-2020-9274
Mitre link : CVE-2020-9274
CVE.ORG link : CVE-2020-9274
JSON object : View
Products Affected
pureftpd
- pure-ftpd
canonical
- ubuntu_linux
fedoraproject
- extra_packages_for_enterprise_linux
- fedora
debian
- debian_linux
CWE
CWE-824
Access of Uninitialized Pointer