VYPR

rpm package

suse/proftpd&distro=SUSE Package Hub 15 SP5

pkg:rpm/suse/proftpd&distro=SUSE%20Package%20Hub%2015%20SP5

Vulnerabilities (2)

  • CVE-2023-51713Dec 22, 2023
    affected < 1.3.8b-bp155.2.6.1fixed 1.3.8b-bp155.2.6.1

    make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

  • CVE-2023-48795MedDec 18, 2023
    affected < 1.3.8b-bp155.2.3.1fixed 1.3.8b-bp155.2.3.1

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end