Oracle Linux 9 : tftp (ELSA-2026-80663)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80663 advisory. 5.2-40.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260629 Tenable has extracted the preceding description block...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

tftp security update

5.2-50.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260604...

Oracle Linux 10 : tftp (ELSA-2026-82280)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82280 advisory. 5.2-50.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260604 Tenable has extracted the preceding description block...

tftp security update

5.2-40.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260629...

Oracle Linux 8 : tftp (ELSA-2026-78952)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-78952 advisory. 5.2-28 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260620 Tenable has extracted the preceding description block direct...

tftp security update

5.2-28 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260620...

DEBIAN-CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

EUVD-2026-79128

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234 Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234: Out-of-bounds Read

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-85234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...