Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-106026

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability i...

Linux Distros Unpatched Vulnerability : CVE-2026-106026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches...

DEBIAN-CVE-2026-106026

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

CVE-2026-106026

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

CVE-2026-106026 tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

EUVD-2026-93395

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

CVE-2026-106026 tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

CVE-2026-106026

The tftp-hpa software version 5.4 before 6.0 is vulnerable to an out-of-bounds read in the rewrite_string() function located in tftpd/remap.c. The root cause is that the software walks heap memory while performing jump label searches. Unauthenticated remote attackers can trigger this vulnerabilit...

CVE-2026-106026 tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

CVE-2026-106026

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewritestring in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

PT-2026-106729

tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite string in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote attackers can send read or write requests whose filename matches a remap jump rule to crash the forked in.tftpd request...

SUSE CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

DEBIAN-CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

UBUNTU-CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234 Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234 Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...