Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xeeh-rpu9-63g6
Vulnerability ID VCID-xeeh-rpu9-63g6
Aliases CVE-2019-19272
Summary An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
epss 0.00421 https://api.first.org/data/v1/epss?cve=CVE-2019-19272
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2019-19272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19272
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.61911
EPSS Score 0.00421
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:33:44.854020+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0