Security Advisory

CVE-2019-19272

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-26 03:33:41
Last updated 2024-08-05 02:09:39
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.