Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By sending a crafted SSH identification / version string to the server, a NULL pointer dereference could be caused, apparently because of a race condition in the window message handling, performing the cleanup for invalid connections. This incorrect cleanup code has a use-after-free.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PSFTPd SFTP组件安全漏洞
Vulnerability Description
PSFTPd是一套FTP服务器软件。该软件支持FTP、FTPS和SFTP等协议。SFTP component是其中的一个安全文件传输组件。 PSFTPd 10.0.4 Build 729版本中SFTP组件存在释放后重用漏洞。远程攻击者可通过向服务器发送特制的识别/版本字符串利用该漏洞造成拒绝服务（空指针逆向引用）。
CVSS Information
N/A
Vulnerability Type
N/A