Vulnerability Details : CVE-2020-9273
Potential exploit
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
Vulnerability category: Memory CorruptionExecute code
Products affected by CVE-2020-9273
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.7:*:*:*:*:*:*:*
Threat overview for CVE-2020-9273
Top countries where our scanners detected CVE-2020-9273
Top open port discovered on systems with this issue
22
IPs affected by CVE-2020-9273 48
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2020-9273!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2020-9273
52.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-9273
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2020-9273
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-9273
-
https://cert-portal.siemens.com/productcert/pdf/ssa-679335.pdf
Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2021/09/06/2
oss-security - Re: Possible memory leak on getspnam / getspnam_rMailing List;Third Party Advisory
-
https://www.debian.org/security/2020/dsa-4635
Debian -- Security Information -- DSA-4635-1 proftpd-dfsgThird Party Advisory
-
http://www.openwall.com/lists/oss-security/2021/08/25/1
oss-security - Possible memory leak on getspnam / getspnam_rMailing List;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHO3S5WPRRP7VGKIAHLYQVEYW5HRYIJN/
[SECURITY] Fedora 30 Update: proftpd-1.3.6c-1.fc30 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2020/03/msg00002.html
[SECURITY] [DLA 2115-2] proftpd-dfsg regression updateMailing List;Third Party Advisory
-
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
proftpd/RELEASE_NOTES at master · proftpd/proftpd · GitHubRelease Notes;Third Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00002.html
[security-announce] openSUSE-SU-2020:0273-1: moderate: Security update fMailing List;Third Party Advisory
-
https://security.gentoo.org/glsa/202003-35
ProFTPd: Multiple vulnerabilities (GLSA 202003-35) — Gentoo securityThird Party Advisory
-
https://lists.debian.org/debian-lts-announce/2020/02/msg00022.html
[SECURITY] [DLA 2115-1] proftpd-dfsg security updateMailing List;Third Party Advisory
-
https://github.com/proftpd/proftpd/issues/903
Use-after-free vulnerability in memory pools during data transfer · Issue #903 · proftpd/proftpd · GitHubThird Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCUPRYSJR7XOM3HQ6H5M4OGDU7OHCHBF/
[SECURITY] Fedora 31 Update: proftpd-1.3.6c-1.fc31 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
Jump to