CVE-2019-12815: Debian Linux

Critical severity, CVSS 9.8. EPSS: 57.6% chance of exploitation in the next 30 days.

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 29 only; version 30 only
• ProFTPD ProFTPD: up to and including 1.3.5b
• Siemens SIMATIC CP 1543-1 Firmware: from 2.0, before 2.2 (fixed in 2.2)

Published 2019-07-19. Last modified 2026-06-17.