142 matches found
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0357
An update of 'atftp' packages of Photon OS has been released...
Important Photon OS Security Update - PHSA-2021-3.0-0186
Updates of 'sudo', 'dnsmasq', 'nodejs', 'atftp' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2021-0186
Updates of 'sudo', 'nodejs', 'atftp', 'dnsmasq' packages of Photon OS have been released...
[ASA-202101-24] atftp: denial of service
Arch Linux Security Advisory ASA-202101-24 ========================================== Severity: Medium Date : 2021-01-12 CVE-ID : CVE-2020-6097 Package : atftp Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1395 Summary ======= The package atftp before version...
Ubuntu: Security Advisory (USN-4643-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4643-1 atftp vulnerabilities
It was discovered that atftp's FTP server did not properly handler certain input. An attacker could use this to to cause a denial of service crash or possibly execute arbitrary code. CVE-2019-11365 It was discovered that atftp's FTP server did not make proper use of mutexes when locking certain...
USN-4643-1: atftp vulnerabilities
It was discovered that atftp's FTP server did not properly handler certain input. An attacker could use this to to cause a denial of service crash or possibly execute arbitrary code. CVE-2019-11365 It was discovered that atftp's FTP server did not make proper use of mutexes when locking certain...
Ubuntu 16.04 LTS : atftp vulnerabilities (USN-4643-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4643-1 advisory. It was discovered that atftp's FTP server did not properly handler certain input. An attacker could use this to to cause a denial of service crash or...
openSUSE Security Update : atftp (openSUSE-2020-1736)
This update for atftp fixes the following issues : - boo1176437, CVE-2020-6097 A specially crafted sequence of RRQ-Multicast requests can trigger an assert call resulting denial-of-service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
openSUSE: Security Advisory for atftp (openSUSE-SU-2020:1736-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1736-1 Security update for atftp
This update for atftp fixes the following issues: - boo1176437, CVE-2020-6097 A specially crafted sequence of RRQ-Multicast requests can trigger an assert call resulting denial-of-service...
Security update for atftp (important)
openSUSE Security Update: Security update for atftp Announcement ID: openSUSE-SU-2020:1736-1 Rating: important References: 1176437 Cross-References: CVE-2020-6097 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for atftp fixe...
Ubuntu: Security Advisory (USN-4540-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
atftp is vulnerable to denial of service DoS. The vulnerability exists as it does not lock the threadlistmutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If threaddata is NULL whe...
Arbitrary Code Execution
atftp is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow due to an insecurely implemented strncpy call which occurs when an error packet of 3 bytes or fewer is sent...
CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...
CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...
DEBIAN-CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...
CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...
UBUNTU-CVE-2020-6097
An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...