In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1934
Reference (s):
- https://httpd.apache.org/security/vulnerabilities_24.html
- URL: https://httpd.apache.org/security/vulnerabilities_24.html
- https://security.netapp.com/advisory/ntap-20200413-0002/
- URL: https://security.netapp.com/advisory/ntap-20200413-0002/
- DEBIAN:DSA-4757