UpHeron
All vulnerabilities

Servers and applications

CVE-2019-18217

ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.

Severity
High 7.5
Published
21 Oct 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
20% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ProFTPDServers and applications · cpe:a:proftpd:proftpd
  • Version 1.3.7-rc1
  • Version 1.3.6
  • Version 1.3.6-rc4
  • Version 1.3.6-rc3
All 8 release lines
  • Every version up to 1.3.5
  • Version 1.3.6-a
  • Version 1.3.6-rc1
  • Version 1.3.6-rc2
  • Version 1.3.6-rc3
  • Version 1.3.6-rc4
  • Version 1.3.6
  • Version 1.3.7-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-18217
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-18217