CVE-2020-9273

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-20 · updated 2026-06-17
Weakness: CWE-416

Description

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.

Affected products

Debian Linux: 8.0, 9.0, 10.0
Fedoraproject Fedora: 30, 31
openSUSE Backports Sle: 15.0, 15.0-sp1
openSUSE Leap: 15.1
ProFTPD: 1.3.7
Siemens Simatic Net Cp 1543-1 Firmware: before 3.0 — fixed in 3.0
Siemens Simatic Net Cp 1545-1 Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens Simatic Net Cp 1543-1 Firmware 3.0. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00002.html
http://www.openwall.com/lists/oss-security/2021/08/25/1
http://www.openwall.com/lists/oss-security/2021/09/06/2
https://cert-portal.siemens.com/productcert/pdf/ssa-679335.pdf
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
https://github.com/proftpd/proftpd/issues/903
https://lists.debian.org/debian-lts-announce/2020/02/msg00022.html
https://lists.debian.org/debian-lts-announce/2020/03/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCUPRYSJR7XOM3HQ6H5M4OGDU7OHCHBF/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHO3S5WPRRP7VGKIAHLYQVEYW5HRYIJN/
https://security.gentoo.org/glsa/202003-35
https://www.debian.org/security/2020/dsa-4635

Get alerted when CVE-2020-9273 or the next vulnerability affects your stack