CVE-2020-9272: Opensuse Backports Sle

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.

Affected products

• Opensuse Backports Sle: version 15.0 only
• Opensuse Leap: version 15.1 only
• ProFTPD ProFTPD: before 1.3.6c (fixed in 1.3.6c)
• Siemens SIMATIC Net CP 1543-1 Firmware: before 3.0 (fixed in 3.0)
• Siemens SIMATIC Net CP 1545-1 Firmware: any version

Published 2020-02-20. Last modified 2026-06-17.