CVE-2019-16864
published 2022-02-14CVE-2019-16864: CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH…
PriorityP263high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
7.23%
93.5th percentile
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| enterprisedt | completeftp_server | < 12.1.4 | 12.1.4 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.5HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7jwh-866w-rq5r: CompleteFTPService
ghsa_unreviewed·2022-02-15
CVE-2019-16864 [HIGH] CWE-77 GHSA-7jwh-866w-rq5r: CompleteFTPService
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM.
Red Hat
systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864
vendor_redhat·2019-01-14·CVSS 7.8
CVE-2019-3815 [HIGH] CWE-401 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864
systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash.
Stat
No detection rules found.
No public exploits indexed.
2022-02-14
Published