143 matches found
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : atftp vulnerabilities (USN-6334-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6334-1 advisory. Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp...
SUSE CVE-2019-11365
An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...
SUSE CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the threadlistmutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If threaddata is NULL when assigned to current, a...
SUSE CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...
SUSE CVE-2021-41054
tftpdfile.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options...
Debian: Security Advisory (DLA-3028-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-3028-1 : atftp - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3028 advisory. - options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client. CVE-2021-46671 Note that Nessus...
DLA-3028-1 atftp - security update
Bulletin has no description...
[SECURITY] [DLA 3028-1] atftp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3028-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...
Moderate Photon OS Security Update - PHSA-2022-0454
Updates of 'openssl', 'atftp', 'vim' packages of Photon OS have been released...
SUSE: Security Advisory (SUSE-SU-2022:0881-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : atftp (SUSE-SU-2022:0881-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0881-1 advisory. - CVE-2021-46671: Fixed a potential information leak in atftpd bsc1195619. Tenable has extracted the preceding description block directly fr...
SUSE-SU-2022:0881-1 Security update for atftp
This update for atftp fixes the following issues: - CVE-2021-46671: Fixed a potential information leak in atftpd bsc1195619...
Denial Of Service (DoS)
atftp is vulnerable to denial of service. It reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...
CVE-2021-46671
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...
CVE-2021-46671
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...
DEBIAN-CVE-2021-46671
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...
CVE-2021-46671
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...
