An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T02:09:39.567Z
Reserved: 2019-11-26T00:00:00
Link: CVE-2019-19269

No data.

Status : Modified
Published: 2019-11-30T23:15:18.223
Modified: 2024-11-21T04:34:27.800
Link: CVE-2019-19269

No data.