Lucene search
K

64 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux - уязвимость в atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...

7.5CVSS7.3AI score0.00758EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/29 12:0 a.m.1 views

SUSE SLES15 : Recommended update 5.0.5.1 for Multi-Linux Manager Server (SUSE-SU-2025:3825-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3825-1 advisory. proxy-helm, proxy-httpd-image, proxy-salt-broker-image, proxy-squid-image, proxy-ssh-image, proxy-tftpd- image: - Images rebuilt to the newest version...

8.8CVSS5.5AI score0.00083EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/10/28 2:41 p.m.3 views

Maintenance update for Multi-Linux Manager 5.1.1

Description: This update fixes the following issues: Multi-Linux-Manager-Proxy-SLE-release: Update for the release packages for fixing the EOL Fixed migration issue bsc1243486 proxy-helm was updated fromv version 5.1.7 to 5.1.9: Version 5.1.9 Chart rebuilt to the newest version with updated...

8.8CVSS6.9AI score0.00466EPSS
Exploits0References76
SUSE Linux
SUSE Linux
added 2025/10/17 8:47 a.m.2 views

Security update 5.1.1 of SUSE Multi-Linux Manager

This update for SUSE Multi-Linux Manager fixes the following issues: proxy-helm was updated fromv version 5.1.7 to 5.1.9: Version 5.1.9 Chart rebuilt to the newest version with updated dependencies Version 5.1.8 Use traefik.io API group bsc1244919 proxy-httpd-image was updated fromv version 5.1.8...

8.6CVSS6.8AI score0.00083EPSS
Exploits0References54
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4873

Malware in sbrugna...

5CVSS6.4AI score0.0119EPSS
Exploits4References6
SUSE Linux
SUSE Linux
added 2025/07/23 12:36 p.m.3 views

Maintenance update for Multi-Linux Manager 4.3: Server, Proxy and Retail Branch Server

Description: This update fixes the following issues: mgr-daemon: Version 4.3.12-0: Updated translation strings proxy-helm: Version 4.3.17: Chart rebuilt to the newest version with updated dependencies for SUSE Manager 4.3.16 proxy-httpd-image: Version 4.3.18: Image rebuilt to the newest version...

9.8CVSS7.2AI score0.06073EPSS
Exploits1References130
SUSE Linux
SUSE Linux
added 2025/04/16 7:57 a.m.1 views

Security update for Multi-Linux Manager 5.0: Server, Proxy and Retail Server

Description: This update fixes the following issues: proxy-helm: Version 5.0.12: Image rebuilt to the newest version with updated dependencies proxy-httpd-image: Version 5.0.10: Fixed wrong IP address set on susemanager-tftpsync-recv.conf Image rebuilt to the newest version with updated...

5.6CVSS7.3AI score0.00082EPSS
Exploits0References70
Positive Technologies
Positive Technologies
added 2023/02/17 12:0 a.m.2 views

PT-2023-16590 · Phjounin · Tftpd64-Se

Name of the Vulnerable Software and Affected Versions: phjounin TFTPD64-SE version 4.64 Description: A critical issue affects the processing of the file tftpd64 svc.exe, leading to an unquoted search path. The manipulation can be exploited locally, with a rather high complexity of attack and...

7.8CVSS7AI score0.00056EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:12 a.m.0 views

SUSE CVE-2019-11365

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

9.8CVSS7.7AI score0.03727EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2021/09/25 7:0 a.m.0 views

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data OACK and other options.

...

7.5CVSS7AI score0.00758EPSS
Exploits1
OSV
OSV
added 2021/09/13 9:15 p.m.1 views

DEBIAN-CVE-2021-41054

tftpdfile.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options...

7.5CVSS8AI score0.00758EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.1 views

atftp 安全漏洞

atftp is a client implementation of the TFTP protocol. A security vulnerability exists in tftpdfile.c in ATFTP 0.7.4 and earlier versions, which stems from buffer size handling that does not properly account for combinations of data, OACK, and other options...

7.5CVSS7.6AI score0.00758EPSS
Exploits1References7
OSV
OSV
added 2019/04/20 1:29 p.m.1 views

DEBIAN-CVE-2019-11365

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

9.8CVSS9.5AI score0.03727EPSS
Exploits1References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

Novell ZenWorks 10 & 11 TFTPD Remote Code Execution Vulnerability

No description provided by source. !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=22&Itemid=22 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.100.24'; my $port = 69; my $proto = 'udp'; my $sockType = SOCKDGRAM; my $timeo...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Ascend CascadeView/UX 1.0 tftpd - Symbolic Link Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/910/info The tftpd bundled with CascadeView for Ascend's B-STDX 8000/9000 network devices creates a log in /tmp called tftpdxferstatus.log. If /tmp/tftpdxferstatus.log already exists as a symbolic link, tftpd will follow ...

7.1AI score
Exploits0
NVD
NVD
added 2013/05/20 2:44 p.m.9 views

CVE-2013-0145

Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in a read request...

5CVSS8.1AI score0.314EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2013/05/20 2:44 p.m.0 views

CVE-2013-0145

Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in a read request...

5CVSS6.3AI score0.314EPSS
Exploits0References2
Prion
Prion
added 2013/05/20 2:44 p.m.8 views

Buffer overflow

Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in a read request...

5CVSS8.8AI score0.314EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2013/05/19 10:0 a.m.13 views

CVE-2013-0145

Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long string in a read request...

8.1AI score0.314EPSS
Exploits0References1
CVE
CVE
added 2013/05/19 10:0 a.m.39 views

CVE-2013-0145

CVE-2013-0145 describes a buffer overflow in the TFTPD service of Serva32 2.1.0 triggered by large TFTP read requests, leading to a denial of service (daemon crash) and potentially arbitrary code execution. Red Hat postings mirror the issue in Serva32 2.1.0 TFTPD. CERT notes the vulnerability and...

5CVSS8.2AI score0.314EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder