{"id":"CVE-2020-9365","details":"An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.","modified":"2026-07-09T00:12:17.509553Z","published":"2020-02-24T16:15:13.313Z","related":["openSUSE-SU-2024:11773-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"30"},{"last_affected":"30"},{"introduced":"31"},{"last_affected":"31"},{"introduced":"32"},{"last_affected":"32"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5NSUDWXZVWUCL6R2PTX3KBB42Z62CA5/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5DBVHJCXWRSJPNJQCJQCKZF6ZDPZCKA/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202003-54"},{"type":"FIX","url":"https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e"},{"type":"FIX","url":"https://github.com/jedisct1/pure-ftpd/commit/bf6fcd4935e95128cf22af5924cdc8fe5c0579da"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jedisct1/pure-ftpd","events":[{"introduced":"c21b45fc752039bceed8c8d4a1b8b9818a2fde20"},{"last_affected":"c21b45fc752039bceed8c8d4a1b8b9818a2fde20"},{"fixed":"36c6d268cb190282a2c17106acfd31863121b58e"},{"fixed":"bf6fcd4935e95128cf22af5924cdc8fe5c0579da"}],"database_specific":{"cpe":"cpe:2.3:a:pureftpd:pure-ftpd:1.0.49:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.49"},{"last_affected":"1.0.49"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.0.49"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-9365.json","vanir_signatures_modified":"2026-07-09T00:12:17Z","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["95891114108689080271635707879851571584","336842005398644163625468051387470758073"]},"id":"CVE-2020-9365-7e5360e1","signature_type":"Line","signature_version":"v1","source":"https://github.com/jedisct1/pure-ftpd/commit/bf6fcd4935e95128cf22af5924cdc8fe5c0579da","target":{"file":"src/utils.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e","target":{"file":"src/utils.c"},"deprecated":false,"digest":{"line_hashes":["95891114108689080271635707879851571584","336842005398644163625468051387470758073"],"threshold":0.9},"id":"CVE-2020-9365-85e7bab8","signature_type":"Line"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}