CVE-2020-9274 is an uninitialized pointer vulnerability in Pure-FTPd versions up to 1.0.49, affecting products like Canonical, Debian, and FedoraProject. This flaw allows attackers to cause a denial of service by triggering a failure to correctly detect the end of a linked list. With a CVSS score of 7.5 (HIGH), it has a low attack complexity and does not require user interaction or privileges, though the impact is limited to availability. While no active exploitation or public exploit code (Metasploit, ExploitDB) is reported, a Nuclei template exists for a DoS exploit, and there is minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.50CPE matchmatch criteria | cpe:2.3:a:pureftpd:pure-ftpd:*:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:* | ||
30CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.