CVE-2020-1934 – In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialize

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1934

Reference (s):

• https://httpd.apache.org/security/vulnerabilities_24.html
• URL: https://httpd.apache.org/security/vulnerabilities_24.html
• https://security.netapp.com/advisory/ntap-20200413-0002/
• URL: https://security.netapp.com/advisory/ntap-20200413-0002/
• DEBIAN:DSA-4757